falcosecurity/falco

Issues

• ERROR: `Error: Initialization issues during scap_init`

  #3323 opened 2 months ago by OneideLuizSchneider
  13

• `hostname` can not be omitted from logging

  #3397 opened a month ago by jonbos
  0

• [Feature request] Able to extract all available fields into output_fields

  #3287 opened 4 months ago by AmberSecurity
  1

• Falco Training links broken

  #3396 opened a month ago by killerzwelch
  1

• Use string operators with lists

  #3395 opened a month ago by wangwillian0
  0

• Falco doesn’t work in any driver mode on Oracle Linux

  #3390 opened a month ago by kirylbelavus
  5

• Falco Driver for ECS Fargate in Oct. 2024?

  #3393 opened a month ago by gjyoung1974
  1

• Container information missing in the alerts generated by the "Privileged Shell Spawned in Container" rule.

  #3345 opened 2 months ago by dmeetreey
  18

• How to eanble and use Incubating Falco Rules or Sandbox Falco Rules?

  #3384 opened a month ago by yf-0dyssey
  2

• Undetected container/k8s information leads to alert fatigue caused by k8s_containers macro

  #3257 opened 5 months ago by aberezovski
  6

• Can mistakenly append to a base rule from a rule with a different source.

  #3382 opened a month ago by mstemm
  0

• Support multiple container runtime in one node

  #3279 opened 4 months ago by hitsub2
  4

• Why use bpf_printk printed message in the/sys/kernel/debug/tracing/trace_pipe can't see

  #3387 opened a month ago by aliinchina
  1

• Falco doesn't update/sync with system time after start

  #3285 opened 4 months ago by illethrias
  1

• Missing container and k8s details except container.id in case of least privileged falco

  #3256 opened 5 months ago by aberezovski
  5

• ubuntu 18.04 hwo to install falco

  #3381 opened a month ago by zer0-1s
  1

• Falco Stopped Sending Granular Insights for Dropped Categories After Update to 0.39.1

  #3377 opened a month ago by kirylbelavus
  2

• CI pipeline uses CentOS 7 which is EOL

  #3270 opened 2 months ago by johananl
  7

• Send informational messages to stdout instead of stderr

  #3367 opened 2 months ago by pirxthepilot
  0

• [Rocky Linux 9.4] can't build eBPF probe

  #3366 opened 2 months ago by Sartigan
  0

• [Tracking] Falco 0.39.0 Release

  #3326 opened 2 months ago by alacuku
  4

• [Question] Difference about drop metrics

  #3348 opened 2 months ago by chenliu1993
  4

• Collecting all the labels from the containers

  #3346 opened 2 months ago by Issif
  0

• Default rules for contenarized databases

  #3342 opened 2 months ago by Diegunio
  0

• Falco hogs all memory and crashes server upon invalid yaml

  #3281 opened 4 months ago by MprBol
  12

• support raw log output and capturing the full command line

  #3259 opened 2 months ago by Jumbo-WJB
  5

• Falco driver loader init container fails to download artifacts behind proxy

  #3339 opened 2 months ago by MaciekLeks
  0

• Metrics best practice review (3 issues found)

  #3336 opened 2 months ago by leogr
  6

• Falco crash after few minutes on GKE 1.27 on COS

  #3278 opened 2 months ago by judikag03
  26

• Falco Installtion on k8s cluster runing on vagrant vms

  #3284 opened 4 months ago by brahgithubsal
  1

• Memory usage keeps increasing until OOM

  #3269 opened 5 months ago by ciprian2k
  15

• [Proposal] Allow for custom outputs wrapper fields

  #3277 opened 5 months ago by incertum
  14

• Metrics: merge different metrics into series + labels

  #3309 opened 2 months ago by Issif
  11

• can't install falco in CentOS 7.9

  #3318 opened 2 months ago by yf-0dyssey
  13

• falco pods are into Init:CrashLoopBackOff state

  #3306 opened 3 months ago by rshiva777
  9

• `rules_file`/`rules_files` not being respected

  #3296 opened 4 months ago by kimberleyhallifax
  10

• Create `container_engines` configs in `falco.yaml`

  #3258 opened 3 months ago by incertum
  2

• [UMBRELLA] Streamlining `falco.yaml` structure

  #3254 opened 5 months ago by leogr
  0

• [TRACKING] Rules syntax enhancements (backward-compatible)

  #3255 opened 5 months ago by leogr
  0

• Add fuzz-testing

  #3304 opened 3 months ago by harshitasao
  1

• Improvement of OpenSSF Scorecard Score

  #3297 opened 4 months ago by harshitasao
  2

• Add custom tags to all rules without manually overriding or appending each rule

  #3303 opened 3 months ago by dbeilin
  0

• "Drop and execute new binary in container rule" not working using modern_ebpf driver on EKS 1.29

  #3286 opened 3 months ago by shugg
  8

• [Tracking] Falco 0.38.2

  #3289 opened 3 months ago by LucaGuerra
  1

• Falco 0.37.1 crashes with "could not parse param 13 (comm) for event of type 223 (clone): expected length 10, found 14"

  #3275 opened 5 months ago by kanishk7bantu
  3

• Falco 0.38 crashes node when package management process launched inside container

  #3276 opened 3 months ago by chenliu1993
  7

• Metrics don't follow Prometheus best practices

  #3271 opened 4 months ago by Issif
  9

• [Question] Can Falco prevent?

  #3280 opened 4 months ago by za
  3

• Auto downloading kernel headers takes too long, ~14min

  #3268 opened 5 months ago by guoqingxibei
  6

• libk8saudit.so: can't load plugin dynamic library

  #3261 opened 5 months ago by myugan
  4