Sysdig Falco
Sysdig falco Falco developed the core software supporting the sysdig open source solution. Specifically, it uses the sysdig kernel module to request intervention and the sysdig library for monitoring and decision making. Both are used and working on hundreds of thousands of machines today. This means that even for the first "0.1.0" version the security is very good. Note that Falco does not attempt to write, report, report or alter. Following the Unix "just do one thing" philosophy, Falco is the ultimate tool for reporting and monitoring designed to integrate with any system you currently use. Falco is a long-term employee. It can be installed in the container as a container to monitor the host itself and all containers running on it. Of course, it can be installed as a regular hosting package. During deployment, the falco system calls the event stream and checks each event against a list of rules in its configuration file. ...