Viewing profile — markstemm

Hi, Falco developer here. We do have support for running falco with an ebpf program taking the place of the kernel module. You can learn more about ebpf support at https://github.c…

Great to see sysdig and falco used in this way! For another earlier discussion of monitoring the behavior of intruders using sysdig, check out https://sysdig.com/blog/fishing-for-h…