Falco 0.5.0 now available

Falco 0.5.0 has been released, introducing a variety of updates including new security monitoring features, rule changes, and bug fixes aimed at enhancing its functionality as a behavioral security monitor. The release includes optimizations to reduce notification noise, such as caching output formatting objects and implementing a token bucket for notification throttling. New features allow Falco to record event processing statistics and run in a container without explicitly loading the kernel module, while log verbosity can be adjusted through configuration. The ruleset has been updated to include new programs and images, and bug fixes ensure better validation of output fields and the functionality of build options. The update is accessible through rpm/debian packages, Docker Hub, and GitHub, with further details available in the changelog.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.