plugins
falcosidekick
Our great sponsors
| plugins | falcosidekick | |
|---|---|---|
| 1 | 2 | |
| 74 | 510 | |
| - | 3.9% | |
| 9.4 | 9.5 | |
| 4 days ago | 3 days ago | |
| Go | Go | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
plugins
-
Threat Detection on EKS – Comparing Falco and GuardDuty For EKS Protection
Existing Falco rules can be disabled or modified. New supplemental rules can be written to detect environment specific use cases. Falco is not just limited to Kubernetes syscalls or audit logs - recently Falco released a plugin capability, allowing Falco to be extended to consume additional event sources. One such example of this is the AWS CloudTrail Plugin.
falcosidekick
-
Manage Falco easier with Giant Swarm App Platform
How does Falco do that? Based on a set of rules that Falco interprets at startup time, it waits for events and syscalls that would trigger one of those rules. When a rule is triggered, Falco raises an alert and, thanks to applications like Falco Sidekick, allows teams to react accordingly.
-
Threat Detection on EKS – Comparing Falco and GuardDuty For EKS Protection
Falco can emit its findings to stdout, a file, syslog, or custom endpoints with "Program Output" using bash. Alternatively, Falcosidekick is an extra app that receives Falco alerts from multiple clusters and forwards them to a variety of outputs concurrently. Falcosidekick has a large number of custom destinations, so it may reduce the need to write custom integrations for existing destinations like a SIEM.
What are some alternatives?
falco-the-kubernetes-response-engine-using-openfaas-functions - Demonstrating how you can take an action to your intrusions detected by Falco using OpenFaaS functions
containers-roadmap - This is the public roadmap for AWS container services (ECS, ECR, Fargate, and EKS).
falco - Cloud Native Runtime Security
terraform-provider-aws - The AWS Provider enables Terraform to manage AWS resources.
trivy - Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
eBPF-Guide - eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.
apptestctl - Command line tool for using the Giant Swarm app platform in integration tests.
kubectl-gs - kubectl plugin helping with custom resources by Giant Swarm
chart-operator - Deploys Helm charts in Kubernetes workload clusters