Falco
Runtime Security · Advanced
Runtime threat detection for containers/K8s.
Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.
What to learn
- Syscall rules
- Alerts
Example commands (lab VMs only)
- falco --listList rules