Practical Cloud Native Security
with Falco

Risk and threat detection for containers, Kubernetes, and cloud

Falco was designed for the modern world of cloud native applications, with out-of-the-box support for containers, Kubernetes, and cloud. With Falco you can detect threats at runtime and tap into kernel modules and eBPF providing incredible visibility into everything that is happening in your infrastructure.

Dive into this new book to obtain cloud native threat detection basics and get Falco rules, outputs and plugins up and running.

In this eBook you will learn:

• What Falco is and is not in a nutshell
• How to get started with Falco on your machine
• Falco’s architecture and inner workings, including using plugins
• Real-world use cases to help you get started on protecting your applications and systems in production

Written by Falco creator Loris Degioanni and core maintainer Leonardo Grasso, this eBook will guide you step by step so that you can secure your cloud and container infrastructure.