Falcoctl: install and manage your rules and plugins

Since the launch of the plugin framework in January 2022, our adopters have requested an out-of-the-box solution to manage the lifecycle of rules (installation, updates). We heard your request and also created a guide to help you smoothly …

Falco 0.34.1

Today we announce the release of Falco 0.34.1 🦅! Novelties 🆕 and Fixes Here's a minor update! This patch release addresses small but persistent issues that have been causing inconvenience for users: http_output not working as expected when …

Rule basics for the Falco 3.0.0 Helm chart

The new Falco Helm chart 3.0.0 (full documentation, upgrade information) comes with a new way to automatically update the Falco rules that are currently loaded. Of course, you can enable, disable and configure this functionality to your …

Falco 0.34.0 a.k.a. "The Honeybee 🍯"

Dear community, today we are delighted to announce the release of Falco 0.34.0 🎉! A big thank you to the community for helping get the latest release out. The Falco community is thrilled about this release and cannot wait to share the …

The GPG key used to sign Falco packages has been rotated

The Falcosecurity organization uses a GPG key for providing detatched signatures for the official Falco packages available at download.falco.org/?prefix=packages. After the security incident of CircleCI disclosed in January 2023, the Falco …

Falcosidekick 2.27.0 and Falcosidekick-UI 2.1.0

So many good things happened for Falcosidekick and Falcosidekick UI this year. It's still incredible these projects became so beloved and useful for the community. To all contributors, promotors and users, a big big thank you. The new year …

Falco: Project Recap 2022

Dear Falco community, As always, we are truly grateful for the amazing community of maintainers and contributors. The Falco project and community would not be the vibrant ecosystem it is today without these incredible individuals. Let’s …

Cryptomining Detection Using Falco

Cryptominers are programs that utilize computer resources to mine cryptocurrency. XMRig is an example of an open source cryptomining software designed for the sole purpose of mining cryptocurrencies, like Monero or Bitcoin. Cryptominers …

Getting started with modern BPF probe in Falco

The new BPF probe has landed among us 👽 and it brings to the table new shiny features. The BPF world grows continuously and every new kernel release introduces some unbelievable novelties! To take advantage of these we have created a …