falcosecurity / testing
All-purpose test suite for Falco and its ecosystem
☆12Updated 2 weeks ago
Related projects: ⓘ
- Ansible playbooks to provision firecracker VMs and run Falco kernel tests☆10Updated 4 months ago
- Fetches the metadata from kubernetes API server and dispatches them to Falco instances☆14Updated 3 months ago
- A tool to crawl Linux kernel versions☆17Updated last month
- Web-application used to validate Falco rules and test against scap file☆19Updated 4 months ago
- A crawler for kernel releases distributed by the major Linux distributions.☆12Updated last month
- Kit for building Falco drivers: kernel modules or eBPF probes☆64Updated last week
- Administrative tooling for Falco☆88Updated this week
- Generate a variety of suspect actions that are detected by Falco rulesets☆87Updated 3 weeks ago
- Ebpf faqs, samples, tooling☆43Updated 3 years ago
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆34Updated last month
- Kubearmor Virtual Machine Service allows orchestrating policies to VMs and Bare-Metal environments using either k8s or non-k8s control pl…☆11Updated 9 months ago
- Shape your traffic the BPF way☆77Updated last year
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆20Updated 2 years ago
- Source code of the official Falco website☆35Updated this week
- Falco rule repository☆92Updated this week
- bpflock - eBPF driven security for locking and auditing Linux machines☆136Updated 2 years ago
- Falco plugins registry☆82Updated this week
- Falco workflow & testing infrastructure☆31Updated this week
- KubeArmor cli tool aka kArmor☆34Updated this week
- Falco plugins SDK for Go☆24Updated 2 months ago
- Intent driven security automation framework☆23Updated this week
- ebpf compiler in Go; Write Go, get ebpf☆27Updated 3 weeks ago
- A tool for in-depth analysis of container checkpoints☆95Updated last month
- Discover Linux kernel namespaces in Go. Almost everywhere. Aware of various OCI container engines, even engines in containers.☆40Updated 2 months ago
- A replacement for "kubectl exec" that works over WebSocket connections.☆27Updated 5 months ago
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆129Updated 2 years ago
- DSL language to write seccomp filters☆35Updated 5 months ago
- Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data e…☆30Updated 11 months ago
- Evolution process of The Falco Project☆48Updated this week
- agent for handling seccomp descriptors for container runtimes☆41Updated 7 months ago