Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CNCF [Cloud Native Computing Foundation]

Extend Falco with Plugins - Trigger Alerts with Any Stream of Events

CNCF [Cloud Native Computing Foundation] via YouTube

Start learning Write review
CodeSignal Ad

Learn the Skills Netflix, Meta, and Capital One Actually Hire For

Learn More → University of the People Ad

Earn Your CS Degree, Tuition-Free, 100% Online!

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This course explains how Falco plugins extend event input beyond system capture. It covers source and extractor plugins, their settings and technical caveats, and demonstrates the Go SDK and existing plugins.

Syllabus

Intro
What is Falco: Reminder
What is Falco: Now
Falco Architecture
libscap aka library for System Capture
libsinsp aka library for System INSPection
Falco: the Evolution
Plugins: Technical Details
Plugins: 2 Flavors
Source plugins: Sequence Diagram
Extractor plugins: Sequence Diagram
Plugins: Settings
Plugins: Technical Caveats
Plugin SDK Go: Why
Plugin SDK Go: Getting started
Plugins: The Registry
AWS Cloudtrail Plugin
JSON Plugin
Demo Time
WIP: Shared libs/modules for plugins
Falco with Real World: Pet Surveillance
Useful links
Contribute to Falco

Taught by

CNCF [Cloud Native Computing Foundation]

Reviews

Start your review of Extend Falco with Plugins - Trigger Alerts with Any Stream of Events

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.