Visit Website

This repository contains officially managed Falco Rules by The Falco Project, pre-defined detections for security threats, abnormal behaviors, and compliance-related monitoring. Users can modify community-contributed rules or create custom ones, focusing on syscalls and container events. Stay updated with the Rules Overview Document and release notes for evolving threats and systems.

ALTERNATIVES

Fail2ban is a daemon that scans log files and bans IPs showing malicious signs to protect servers from brute-force attacks.