Alexander Lawrence – Extend Falco with Plugins: Trigger Alerts with any Stream of Events

November 17, 2022

Falco is the de facto runtime security agent for Kubernetes environments. By capturing syscalls, it can see everything at the Kernel level. Learn how, with the new Plugin system, you can apply the logic of rules to any event stream you need.