RSS

Posts in 2020

  • Falco 0.26.2 a.k.a. "the download.falco.org release"

    Tuesday, November 10, 2020 in The Falco blog

    Today we announce the release of Falco 0.26.2 🥳 This one is a hotfix release for the Falco 0.26.1 released on October 1st. You can take a look at the set of changes here: 0.26.2 As usual, in case you just want to try out the stable Falco 0.26.2, …

    Read more

  • Falco 0.26.1 a.k.a. "the static release"

    Thursday, October 01, 2020 in The Falco blog

    Today we announce the release of Falco 0.26.1 🥳 This one is a hotfix release for the Falco 0.26.0 released last week! You can take a look at the set of changes here: 0.26.1 0.26.0 As usual, in case you just want to try out the stable Falco 0.26.1, …

    Read more

  • Choosing a Falco driver

    Wednesday, September 23, 2020 in The Falco blog

    Falco works by taking Linux system call information at runtime, and rebuilding the state of the kernel in memory. The Falco engine depends on a driver in order to consume the raw stream of system call information. Currently the Falco project supports …

    Read more

  • Falco 0.25.0 a.k.a. "the summer release"

    Tuesday, August 25, 2020 in The Falco blog

    Today we announce the release of Falco 0.25 🥳 This one is a small release but a very important one!! You can take a look at the set of changes here: 0.25.0 In case you just want to try out the stable Falco 0.25, you can install its packages …

    Read more

  • Falco 0.24.0 a.k.a. "the huge release"

    Thursday, July 16, 2020 in The Falco blog

    After two long months, look who's back! Today we announce the release of Falco 0.24 🥳 You can take a look at the huge set of changes here: 0.24.0 In case you just want to try out the stable Falco 0.24, you can install its packages following the …

    Read more

  • Detect CVE-2020-8557 using Falco

    Wednesday, July 15, 2020 in The Falco blog

    CVE-2020-8557 The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage …

    Read more

  • Extend Falco outputs with falcosidekick

    Monday, June 22, 2020 in The Falco blog

    By default, Falco has 5 outputs for its events: stdout, file, gRPC, shell and http. As you see in the following diagram: Even if they're convenient, we can quickly be limited to integrating Falco with other components. Here comes falcosidekick, a …

    Read more

  • Falco 0.23.0 a.k.a. "the artifacts scope release"

    Monday, May 18, 2020 in The Falco blog

    Another month has passed and Falco continues to grow! Today we announce the release of Falco 0.23 🥳 Wondering why this release is called "The Artifacts Scope" release? Please read more here. You can take a look at the whole set of changes …

    Read more

  • The Scope of Falco

    Monday, April 20, 2020 in The Falco blog

    As The Falco Project continues to grow, we are begining to understand the differences in engagement and support for our tooling. Drawing on the history of the now deprecated Kubernetes incubator and the CNCF project maturity levels we began to …

    Read more

  • Falco 0.22 a.k.a. "the hard fixes release"

    Friday, April 17, 2020 in The Falco blog

    Another month has passed and Falco continues to grow! Today we announce the release of Falco 0.22 🥳 You can take a look at the whole set of changes here: 0.22.0 - thanks to Leonardo Grasso for his first ever release! 0.22.1 - hotfix by me and …

    Read more