awesome-falco
github.com/developer-guy/awesome-falco ↗A curated list of Falco related tools, frameworks, blogs, podcasts, and articles
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me learn and connect resources from awesome-falco"
Installation instructions →What's inside
Blogs and Articles
- Analyze AWS EKS Audit logs with Falco by Ismail Yenigul
- An Introduction to Kubernetes Security using Falco by Frederick Fernando
- A story about touching Falco by RyuSA
- AWS S3 security with CloudTrail and Falco By Alba Ferri
- Container Host Security Demo - Falco for GitLab 13.2 by GitLab Unfiltered
Falco for GitLab 13.2 by GitLab Unfiltered
- Container runtime security in Kubernetes with Falco by gatesch
Interactive Learning
Support and Community
- CalendarLearn and Connect
Subscribe to the Falco calendar, through this ics feed
- Contributor of the MonthDevelop and Contribute
View the contributors of the month
- Developer mailing listDevelop and Contribute
Discuss development issues around the project
- SlackDevelop and Contribute
Chat with other project developers
- StackOverflowLearn and Connect
Practical questions and curated answers
- TwitterLearn and Connect
Follow us on Twitter to get the latest news!
Community Repositories
- Container Runtime Security with Falco by developer-guy
- Extending Falco outputs with Falcosidekick by developer-guy
- Falco Diagrams: Visually learn Falco and its eBPF probe
- falco-filebeat-daemonset by Popsiclestick
Easily deployable daemonset which moves logs from falco with filebeat
- Falco workshop by vicenteherrera
Videos
- Container Runtime Security with Falco by Kubernetes Meetup Tokyo
- Intro to Falco: Intrusion Detection for Containers - Shane Lawrence, Shopify by Shane Lawrence
Shane Lawrence, Shopify by Shane Lawrence
- Kubernetes Master Class - 2020-04-20 - Detecting Anomalous Kubernetes Activity with Falco by Rancher Labs
2020-04-20 - Detecting Anomalous Kubernetes Activity with Falco by Rancher Labs
- Sysdig Falco - Open Source Docker Security - WTF my container just spawned a shell by Sysdig
Open Source Docker Security - WTF my container just spawned a shell by Sysdig
- Unveil hidden malicious processes with Falco in cloud-native environments by Kaizhe Huang
- Webinar: Getting started with container runtime security using Falco by Loris Degioanni
Official projects
- FalcoDocs
Official Falco documentation
- FalcoBlogs
Official blog for the Falco project
- FalcoRepositories
Cloud Native Runtime Security
- falcoctlRepositories
Administrative tooling for Falco.
- Falco Event GeneratorRepositories
Generate a variety of suspect actions that are detected by Falco rulesets
- Falco LibsRepositories
libsinsp, libscap, the kernel module driver, and the eBPF driver sources
Showing a sample of 68 resources. View the full list on GitHub →