https://www.infoq.com/news/2022/10/falco-0-33-kernel-crawler/
The latest release of Falco adds the ability to handle multiple simultaneous event sources within the same instance, support for selecting which syscalls to capture, a new Kernel Crawler to collect the most recent supported kernel versions, and more.
Create an account or login to join the discussion