Sysdig Site Search
Falco 0.8.1 Released
We just released Falco 0.8.1. This has a great list of new features and rule improvements. Rule Improvements The ruleset...
Sysdig contributes Falco’s kernel module, eBPF probe, and libraries to the CNCF
Today, I’m excited to announce the contribution of the sysdig kernel module, eBPF probe, and libraries to the Cloud Native...
Falco vs. Sysdig OSS: Choosing the right tool for the job
The open-source ecosystem is rich with tools that empower developers and security practitioners alike. Two standout projects are Sysdig OSS...
How to use Atomic Red Team to test Falco rules in K8s
The best way to know if something works is to try it out. Ensuring that your security products are actually...
Responding to the Dropbox Breach with a Falco GitHub Plugin
On November 1st, Dropbox disclosed a security breach where the attackers stole over 130 code repositories after gaining access to...
Automated Falco rule tuning
We recently released the automated Falco rule tuning feature in Sysdig Secure. Out-of-the-box security rules are a double-edged sword. On...
Getting started with Kubernetes audit logs and Falco
As Kubernetes adoption continues to grow, Kubernetes audit logs are a critical information source to incorporate in your Kubernetes security...
Detecting CVE-2025-22224 with Falco
The Shadowserver group recently identified over 41,500 internet-exposed VMware ESXi hypervisors vulnerable to CVE-2025-22224, a critical Time-of-Check Time-of-Use (TOCTOU) code...
Container security orchestration with Falco and Splunk Phantom.
Container security orchestration allows to define within your security policy how you are going to respond to your different container...
Getting Started Writing Falco Rules
Sysdig’s Falco is a powerful behavioral activity monitoring tool to detect abnormal behavior in your applications and containers. While it...
