Issif

cercat

Monitor issued certificates in real-time and send alerts to Slack when a domain matches.

falco-demo

A script to deploy a k3s cluster and Falco, useful for demos

falco-rules-explorer

A dashboard to explore Falco Rules

docker-plugin

This is a Falco Plugin allowing to gather events from a locale docker daemon.

twitter-plugin

Falco Plugin for Twitter Stream

aps

Easy switch between AWS Profiles and Regions

bitcoin-plugin

A Falco plugin to track Bitcoin transactions in real time

falco-driver-checker

falco-probes

List available falco probes

dnscollector-falco-plugin

docker-pulls-scraper

Scrape DockerHub stats to track the count of pulls of your images

examples

This repo contains example of raw event examples and possible translations to the OCSF schema.

falco

Cloud Native Runtime Security

falco-gpt

AI-generated remediations for Falco audit events

falco-playground

Web-application used to validate Falco rules and test against scap file

falco-website

Hugo content to generate website content. Hosted by the CNCF

falco_extended_rules

Curating Falco rules with MITRE ATT&CK Matrix

falcoctl

Administrative tooling for Falco

falcosidekick

Connect Falco to your ecosystem

github-package-pulls-scraper

Scrape Github packages to extract their pull counts

go-link-health

Use this tool to check for any potentially dead links on a given web page.

kernel-crawler

A tool to crawl Linux kernel versions

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

my-pkgbuilds

This repo contains all the archlinux packages that I maintain on archlinux aur.

nomad-plugin

This is a Falco Plugin allowing to gather events from Hashicorp Nomad API events stream.

plugins

redisearch-go

Go client for RediSearch

rules

Falco rule repository

seccompagent

agent for handling seccomp descriptors for container runtimes

test-infra

Falco workflow & testing infrastructure