Blog
Do you have something to share? Contribute to Falco blog!
GitOps your Falco Rules
Falco rules management has been a discussed topic for quite a long time. When we start building and customizing rules for our environment, we need a simple way to effectively update and distribute them to our Falco fleet. Starting from …
Add prebuilt drivers for new distro
Hi everyone! Today we are going to learn how to add support for a new distro prebuilt drivers. There are multiple repositories involved with it, and while most of the time it should be a pretty simple job, other times it can become really …
Forward Falco events to AWS Security Lake
Last November at re:Invent (2022) AWS introduced the new security oriented data lake: Amazon Security Lake. The AWS team leading the development of the new service contacted the Falco community and proposed a collaboration to develop the …
Falcoctl: install and manage your rules and plugins
Since the launch of the plugin framework in January 2022, our adopters have requested an out-of-the-box solution to manage the lifecycle of rules (installation, updates). We heard your request and also created a guide to help you smoothly …
Rule basics for the Falco 3.0.0 Helm chart
The new Falco Helm chart 3.0.0 (full documentation, upgrade information) comes with a new way to automatically update the Falco rules that are currently loaded. Of course, you can enable, disable and configure this functionality to your …
Falco 0.34.0 a.k.a. "The Honeybee 🍯"
Dear community, today we are delighted to announce the release of Falco 0.34.0 🎉! A big thank you to the community for helping get the latest release out. The Falco community is thrilled about this release and cannot wait to share the …
The GPG key used to sign Falco packages has been rotated
The Falcosecurity organization uses a GPG key for providing detatched signatures for the official Falco packages available at download.falco.org/?prefix=packages. After the security incident of CircleCI disclosed in January 2023, the Falco …