3 years ago

Category: Software, Security, Kubernetes, Docker, Infrastructure, containerization, automation, yaml, shell

by It should be integrated into your development process, automated to remove the number of manual touchpoints, and extended into the maintenance and operation of the underlying infrastructure. Container security thus is the process of implementing security tools and policies to ensure that your container is running as intended.

Falco is container-native, so rules and alerts are going to understand what is a process but also a container or a Kubernetes pod.

Falco alerts can be triggered by the use of specific system calls, their arguments, and by properties of the calling process.