Plugin Events

Events related to the Plugin system.

Since the introduction of the Plugin System, additional event sources can serve as input for Falco. Those event sources are provided by plugins implementing the event sourcing capability.

Examples of event source defined by offically-supported plugins are:

In addition to these plugins hosted by the Falcosecurity organization, others have written third-party plugins that support additional event sources. Please refer to the official Plugin Registry for the most up-to-date information regarding the Falco plugins acknowledged by the community.

At the implementation level, the plugin system sends events to Falco using the same protocol that is used for syscalls, but the encoding and decoding of the payload is performed by the plugin itself according to its own data format representation. Every plugin exposes the necessary functionality to seamlessly integrate its events with Falco.

CloudTrail Events

Detect undesired actions in your AWS environment

Kubernetes Audit Events

Kubernetes Audit Events will give you a deeper visibility of your environment

Okta Events

Keep an eye on your activity within this famous authentication service