Falco

What problem does it solve?

This Skill provides real-time threat detection for cloud-native environments, identifying suspicious activity and policy violations as they happen.

Core Features & Use Cases

• Runtime Security Monitoring: Continuously monitors system calls and container activity.
• Threat Detection: Identifies known and unknown threats based on predefined rules.
• Use Case: Detect if a newly deployed microservice is attempting to access sensitive system files or establish unexpected network connections, alerting you to a potential compromise.

Quick Start

Use the Falco skill to scan the current Kubernetes cluster for runtime security threats.