Posts in 2021
Kubernetes Response Engine, Part 1: Falcosidekick + Kubeless
Friday, January 15, 2021 By Thomas Labarussias
This blog post is part of a series of articles about how to create a Kubernetes response engine with Falco, Falcosidekick and a FaaS. See other posts: Kubernetes Response Engine, Part 2 : Falcosidekick + OpenFaas Kubernetes Response Engine, Part 3 : …
Falcosidekick 2020
Tuesday, January 12, 2021 By Thomas Labarussias
This fantastic post from @leodido about how has been the previous year 2020 for falco inspired me (link) I wanted to bring everyone up to speed on what we built for falcosidekick in 2020 Aside a lot of improvments and bug fixes, 8 new outputs have …
An Introduction to Kubernetes Security using Falco
Thursday, January 07, 2021 By Frederick Fernando
Let’s talk about Kubernetes security As Kubernetes continues to grow in adoption, it is important for us to know how to secure it. In a dynamic infrastructure platform such as Kubernetes, detecting and addressing threats is important but also …
Falco on WSL2 with a custom kernel
Tuesday, January 05, 2021 By Nuno do Carmo
Falco on WSL2 You love Falco, just read the awesome blog Falco in 2020 - The Falco Project, and want to be part of this growing and wonderful community. "But" you are on Windows 10 and wonder how to run it? Well, the wait is over! Follow …
Falco in 2020
Sunday, January 03, 2021 By Leonardo Di Donato
The scope of this post is to review the progress of Falco and its community during the pandemic year. A year will never forget. I will try to keep it compact, but Falco, and its community, grown so much this year that I feel like this could be a blog …
Posts in 2020
Security boundaries with Kubernetes and systemd
Thursday, December 10, 2020 By Kris Nóva
A familiar scenario Imagine installing a security tool that requires privileged access using the Kubernetes API. Now imagine our cluster is compromised. As an attacker, the first thing I would do would be to ensure that whatever security tool you …
Falco 0.26.2 a.k.a. "the download.falco.org release"
Tuesday, November 10, 2020 By Leonardo Di Donato, Lorenzo Fontana
Today we announce the release of Falco 0.26.2 🥳 This one is a hotfix release for the Falco 0.26.1 released on October 1st. You can take a look at the set of changes here: 0.26.2 As usual, in case you just want to try out the stable Falco 0.26.2, you …
Falco 0.26.1 a.k.a. "the static release"
Thursday, October 01, 2020 By Leonardo Di Donato, Lorenzo Fontana
Today we announce the release of Falco 0.26.1 🥳 This one is a hotfix release for the Falco 0.26.0 released last week! You can take a look at the set of changes here: 0.26.1 0.26.0 As usual, in case you just want to try out the stable Falco 0.26.1, …
Choosing a Falco driver
Wednesday, September 23, 2020 By Kris Nóva
Falco works by taking Linux system call information at runtime, and rebuilding the state of the kernel in memory. The Falco engine depends on a driver in order to consume the raw stream of system call information. Currently the Falco project supports …
Falco 0.25.0 a.k.a. "the summer release"
Tuesday, August 25, 2020 By Lorenzo Fontana, Leonardo Grasso
Today we announce the release of Falco 0.25 🥳 This one is a small release but a very important one!! You can take a look at the set of changes here: 0.25.0 In case you just want to try out the stable Falco 0.25, you can install its packages following …