falco

"Falco is a cloud native security tool that provides runtime security across hosts, containers, Kubernetes, and cloud environments." - https://falco.org

Links

• https://falco.org
• https://falco.org/docs
• https://sysdig.com/opensource/falco
• https://github.com/falcosecurity/falcosidekick route log entries to different destinations based on rules.
• https://github.com/falcosecurity/plugins/tree/main/plugins