{"id":6887,"date":"2021-05-18T13:49:16","date_gmt":"2021-05-18T10:49:16","guid":{"rendered":"https:\/\/www.almtoolbox.com\/blog_he\/?p=6887"},"modified":"2021-05-27T09:56:54","modified_gmt":"2021-05-27T06:56:54","slug":"falco-sysdig","status":"publish","type":"post","link":"https:\/\/www.almtoolbox.com\/blog_he\/falco-sysdig\/","title":{"rendered":"Falco &#038; Sysdig"},"content":{"rendered":"<h3>Falco \u05d4\u05d5\u05d0 \u05e4\u05e8\u05d5\u05d9\u05d9\u05e7\u05d8 Cloud Native \u05d5\u05e7\u05d5\u05d3 \u05e4\u05ea\u05d5\u05d7 \u05dc\u05d4\u05d2\u05e0\u05ea runtime. \u05dc\u05de\u05e2\u05e9\u05d4 \u05d4\u05d5\u05d0 \u05de\u05e0\u05d5\u05e2 \u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05dc- Kubernetes.<\/h3>\n<p>Falco \u05e0\u05d5\u05e6\u05e8 \u05d1-2016 \u05e2&quot;\u05d9 \u05d7\u05d1\u05e8\u05ea Sysdig, \u05d5\u05d4\u05d5\u05d0 \u05e4\u05e8\u05d5\u05d9\u05d9\u05e7\u05d8 \u05d4- runtime security \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05d4\u05e6\u05d8\u05e8\u05e3 \u05dc CNCF (\u05d0\u05e8\u05d2\u05d5\u05df Cloud Native Computing Foundation).<\/p>\n<p>Falco \u05de\u05d6\u05d4\u05d4 \u05d4\u05ea\u05e0\u05d4\u05d2\u05d5\u05ea \u05dc\u05d0-\u05e6\u05e4\u05d5\u05d9\u05d4 \u05e9\u05dc \u05d0\u05e4\u05dc\u05d9\u05e7\u05e6\u05d9\u05d5\u05ea, \u05d5\u05de\u05ea\u05e8\u05d9\u05e2 \u05e2\u05dc \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05d1\u05d6\u05de\u05df \u05d0\u05de\u05ea.<\/p>\n<p><em>Sysdig Secure<\/em> \u05de\u05e8\u05d7\u05d9\u05d1 \u05d0\u05ea \u05d4\u05d9\u05db\u05d5\u05dc\u05d5\u05ea \u05e9\u05dc Falco \u05d1\u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd, \u05d5\u05d9\u05d7\u05d3 \u05d4\u05dd \u05de\u05e1\u05e4\u05e7\u05d9\u05dd \u05de\u05d3\u05d9\u05e0\u05d9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05de\u05e0\u05d5\u05d4\u05dc\u05ea \u05e2\u05d1\u05d5\u05e8 \u05e7\u05d5\u05e0\u05d8\u05d9\u05d9\u05e0\u05e8\u05d9\u05dd, \u05e2\u05e0\u05e0\u05d9\u05dd \u05d5- Kubernetes<br \/>\n(\u05d0\u05e0\u05d5 \u05de\u05d9\u05d9\u05e6\u05d2\u05d9\u05dd \u05d0\u05ea \u05d7\u05d1\u05e8\u05ea Sysdig \u05d1\u05d9\u05e9\u05e8\u05d0\u05dc \u05d5\u05de\u05e6\u05d9\u05e2\u05d9\u05dd \u05ea\u05de\u05d9\u05db\u05d4 \u05d5\u05e8\u05e9\u05d9\u05d5\u05e0\u05d5\u05ea &#8211; \u05e0\u05d9\u05ea\u05df \u05dc\u05e4\u05e0\u05d5\u05ea \u05d0\u05dc\u05d9\u05e0\u05d5 \u05db\u05d3\u05d9 \u05dc\u05e7\u05d1\u05dc trial \u05d5\u05d4\u05e6\u05e2\u05ea \u05de\u05d7\u05d9\u05e8 &#8211; \u05d4\u05e4\u05e8\u05d8\u05d9\u05dd \u05d1\u05d4\u05de\u05e9\u05da).<\/p>\n<p>Falco \u05d9\u05db\u05d5\u05dc \u05dc\u05e0\u05d8\u05e8 \u05d0\u05ea \u05d4- Linux kernel, \u05d5\u05d6\u05d4 \u05de\u05d0\u05e4\u05e9\u05e8 \u05dc- Falco (\u05d5- Sysdig) \u05dc\u05e0\u05d8\u05e8 \u05d5\u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05db\u05dc \u05d4- system calls \u05e9\u05dc Linux (\u05dc\u05de\u05e9\u05dc security events, commands, connections \u05d5\u05e2\u05d5\u05d3).<\/p>\n<p>Falco \u05d2\u05dd \u05de\u05ea\u05d7\u05d1\u05e8 \u05d1\u05d0\u05d5\u05e4\u05df \u05d8\u05d1\u05e2\u05d9 \u05dc- audit logs \u05e9\u05dc Kubernetes API \u05db\u05da \u05e9\u05d4\u05d5\u05d0 \u05d9\u05db\u05d5\u05dc \u05dc\u05d4\u05e6\u05d1\u05d9\u05e2 \u05d1\u05de\u05d4\u05d9\u05e8\u05d5\u05ea \u05e2\u05dc \u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05d7\u05e9\u05d5\u05d3\u05d4. \u05d1\u05e1\u05d1\u05d9\u05d1\u05d5\u05ea \u05e2\u05e0\u05df \u05dc\u05de\u05e9\u05dc, \u05d4\u05d5\u05d0 \u05d9\u05db\u05d5\u05dc \u05d2\u05dd \u05dc\u05e2\u05e7\u05d5\u05d1 \u05d0\u05d7\u05e8\u05d9 \u05d4- cloud audit logs \u05d5\u05dc\u05d6\u05d4\u05d5\u05ea \u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05d7\u05e9\u05d5\u05d3\u05d4 \u05d5\u05d0\u05d9\u05d5\u05de\u05d9\u05dd.<\/p>\n<p><strong>\u05d1\u05db\u05da \u05e9\u05db\u05dc \u05d4\u05de\u05d9\u05d3\u05e2 \u05d4\u05ea\u05e9\u05ea\u05d9\u05ea\u05d9 (\u05db\u05d5\u05dc\u05dc Kubernetes) \u05d5\u05d4\u05d0\u05e4\u05dc\u05d9\u05e7\u05d8\u05d9\u05d1\u05d9 \u05de\u05e0\u05d5\u05d8\u05e8 \u05d5\u05e0\u05db\u05e0\u05e1 \u05dc\u05e7\u05d5\u05e0\u05d8\u05e7\u05e1\u05d8 \u05de\u05e9\u05d5\u05ea\u05e3&nbsp; \u2013 \u05d6\u05d4 \u05de\u05d0\u05e4\u05e9\u05e8 \u05dc\u05e6\u05d5\u05d5\u05ea\u05d9 DevOps \u05d5- Security \u05dc\u05d4\u05d1\u05d9\u05df \u05d1\u05d3\u05d9\u05d5\u05e7 \u05de\u05d9 \u05e2\u05e9\u05d4 \u05de\u05d4 \u05d5\u05de\u05ea\u05d9!<\/strong><\/p>\n<div class=\"alm-box alm-contact\">\n<h4><a href=\"https:\/\/www.almtoolbox.com\/blog_he\/sysdig-webinar-threat-detection\/\" rel=\"noopener\" target=\"_blank\">\u05e0\u05d9\u05ea\u05df \u05dc\u05e6\u05e4\u05d5\u05ea \u05db\u05d0\u05df \u05d1\u05d4\u05d3\u05d2\u05de\u05d4 \u05d1\u05e2\u05d1\u05e8\u05d9\u05ea \u05e9\u05dc Sysdig + Falco \u05d1\u05e2\u05d1\u05e8\u05d9\u05ea<\/a> (\u05de\u05d5\u05e2\u05d1\u05e8\u05ea \u05e2&quot;\u05d9 \u05de\u05e0\u05d4\u05dc \u05d4\u05e4\u05d9\u05ea\u05d5\u05d7 \u05e9\u05dc \u05d4\u05de\u05d5\u05e6\u05e8)<\/h4>\n<\/div>\n<h2>\u05de\u05d3\u05d5\u05e2 Falco ?<\/h2>\n<p>Falco \u05de\u05d1\u05d5\u05e1\u05e1 \u05e0\u05d9\u05d8\u05d5\u05e8 \u05d4\u05ea\u05e0\u05d4\u05d2\u05d5\u05ea (Behavioral monitoring). \u05d1\u05d2\u05d9\u05e9\u05d4 \u05d6\u05d5 \u05d4\u05d5\u05d0 \u05de\u05e1\u05ea\u05db\u05dc \u05e2\u05dc \u05d4\u05de\u05ea\u05e8\u05d7\u05e9 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05d5\u05d9\u05db\u05d5\u05dc \u05dc\u05d4\u05ea\u05e8\u05d9\u05e2 \u05d1\u05de\u05d9\u05d9\u05d3\u05d9\u05ea \u05d0\u05dd \u05de\u05ea\u05e8\u05d7\u05e9 \u05de\u05e9\u05d4\u05d5 \u05d6\u05d3\u05d5\u05e0\u05d9, \u05d5\u05d6\u05d0\u05ea \u05dc\u05d4\u05d1\u05d3\u05d9\u05dc \u05de\u05db\u05dc\u05d9\u05dd \u05d4\u05de\u05d1\u05d5\u05e1\u05e1\u05d9\u05dd \u05e2\u05dc \u05d2\u05d9\u05e9\u05d5\u05ea \u05e2\u05d5\u05e7\u05d1\u05d5\u05ea \u05d7\u05ea\u05d9\u05de\u05d4, \u05d4\u05e2\u05d5\u05e1\u05e7\u05d9\u05dd \u05d1\u05de\u05e8\u05d3\u05e3 \u05d1\u05dc\u05ea\u05d9 \u05e0\u05d2\u05de\u05e8 \u05e9\u05dc \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05d7\u05d3\u05e9\u05d9\u05dd.<\/p>\n<p>\u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea Falco \u05e0\u05d9\u05ea\u05df \u05dc\u05d9\u05e6\u05d5\u05e8 \u05d7\u05d5\u05e7\u05d9\u05dd \u05d4\u05de\u05d2\u05d3\u05d9\u05e8\u05d9\u05dd \u05d4\u05ea\u05e0\u05d4\u05d2\u05d5\u05ea \u05d1\u05dc\u05ea\u05d9 \u05e6\u05e4\u05d5\u05d9\u05d4 \u05e9\u05dc \u05d0\u05e4\u05dc\u05d9\u05e7\u05e6\u05d9\u05d5\u05ea. \u05d0\u05ea \u05d4\u05d7\u05d5\u05e7\u05d9\u05dd \u05d4\u05d0\u05dc\u05d4 \u05e0\u05d9\u05ea\u05df \u05dc\u05d4\u05e2\u05e9\u05d9\u05e8 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d4\u05d5\u05e1\u05e4\u05ea \u05d4\u05e7\u05e9\u05e8\u05d9\u05dd \u05de\u05de\u05d9\u05d3\u05e2 \u05d4\u05de\u05d2\u05d9\u05e2 \u05de\u05e1\u05e4\u05e7 \u05d4\u05e2\u05e0\u05df \u05d5\u05db\u05df \u05de\u05e1\u05d1\u05d9\u05d1\u05d5\u05ea Kubernetes. \u05d5\u05d0\u05d6 \u05e0\u05d9\u05ea\u05df \u05dc\u05d6\u05d4\u05d5\u05ea violations \u05d5\u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05dc\u05d0 \u05d7\u05d5\u05e7\u05d9\u05ea \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05de\u05d9\u05d3\u05e2 \u05e9\u05de\u05e7\u05d5\u05e8\u05d5 \u05d1- community \u05d5\u05d1- CVEs. \u05e0\u05d9\u05ea\u05df \u05d2\u05dd \u05dc\u05d7\u05d1\u05e8 \u05d0\u05ea Falco \u05dc\u05ea\u05d4\u05dc\u05d9\u05db\u05d9 \u05d4\u05ea\u05d2\u05d5\u05d1\u05d4 \u05e9\u05dc \u05d4\u05d0\u05e8\u05d2\u05d5\u05df \u05db\u05d3\u05d9 \u05dc\u05e1\u05e4\u05e7 \u05d8\u05d9\u05e4\u05d5\u05dc \u05de\u05d4\u05d9\u05e8 \u05d5\u05de\u05e7\u05e6\u05d5\u05e2\u05d9 \u05dc\u05d0\u05d9\u05d5\u05de\u05d9\u05dd.<\/p>\n<h3>\u05d4\u05d9\u05ea\u05e8\u05d5\u05e0\u05d5\u05ea \u05e9\u05d1\u05e9\u05d9\u05de\u05d5\u05e9 \u05d1- Falco :<\/h3>\n<ol>\n<li>\u05d7\u05d9\u05d6\u05d5\u05e7 \u05d0\u05d1\u05d8\u05d7\u05ea \u05d4\u05de\u05d9\u05d3\u05e2 \u05e9\u05dc \u05d4\u05e2\u05e0\u05df \u05d5\u05d4- containers (\u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d4\u05d2\u05d3\u05e8\u05ea \u05de\u05d3\u05d9\u05e0\u05d9\u05d5\u05ea \u05e9\u05dc \u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05de- containers, hosts, Kubernetes \u05d5- cloud)<\/li>\n<li>\u05e6\u05de\u05e6\u05d5\u05dd \u05d4\u05e1\u05d9\u05db\u05d5\u05df \u05e2&quot;\u05d9 \u05d4\u05ea\u05e8\u05d0\u05d5\u05ea \u05de\u05d9\u05d9\u05d3\u05d9\u05d5\u05ea. \u05e0\u05d9\u05ea\u05df \u05dc\u05d4\u05d2\u05d9\u05d1 \u05d1\u05d0\u05d5\u05e4\u05df \u05de\u05d9\u05d9\u05d3\u05d9 \u05d5\u05dc\u05d7\u05d1\u05e8 \u05d0\u05ea Falco \u05dc\u05ea\u05d4\u05dc\u05d9\u05db\u05d9 \u05e2\u05d1\u05d5\u05d3\u05d4 \u05d4\u05de\u05d2\u05d9\u05d1\u05d9\u05dd \u05dc\u05d0\u05d9\u05d5\u05de\u05d9\u05dd<\/li>\n<li>\u05dc\u05de\u05e0\u05e3 \u05d7\u05d5\u05e7\u05d9\u05dd \u05d5\u05dc\u05d4\u05e2\u05e9\u05d9\u05e8 \u05d0\u05d5\u05ea\u05dd \u05d1\u05d0\u05d5\u05e4\u05df \u05de\u05d9\u05d9\u05d3\u05d9. Falco \u05de\u05d2\u05d9\u05e2 \u05e2\u05dd \u05d0\u05d5\u05e1\u05e3 \u05d7\u05d5\u05e7\u05d9\u05dd \u05de\u05d5\u05db\u05e0\u05d9\u05dd \u05d4\u05de\u05ea\u05e8\u05d9\u05e2\u05d9\u05dd \u05e2\u05dc \u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05d6\u05d3\u05d5\u05e0\u05d9\u05ea \u05d5\u05e4\u05e8\u05e6\u05d5\u05ea \u05d9\u05d3\u05d5\u05e2\u05d5\u05ea (CVEs)<\/li>\n<\/ol>\n<h3>\u05d0\u05d9\u05da Sysdig Secure \u05de\u05e2\u05e9\u05d9\u05e8 \u05d0\u05ea Falco ?<\/h3>\n<p>Sysdig Secure \u05de\u05de\u05e0\u05e3 \u05d0\u05ea Falco , \u05d5\u05de\u05e1\u05e4\u05e7 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d1\u05d6\u05de\u05df \u05e8\u05d9\u05e6\u05d4 \u05d5\u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05d1\u05e2\u05e0\u05df. Sysdig \u05d7\u05d5\u05e1\u05da \u05d6\u05de\u05df \u05e8\u05d1 \u05d1\u05d9\u05e6\u05d9\u05e8\u05d4 \u05d5\u05ea\u05d7\u05d6\u05d5\u05e7\u05d4 \u05e9\u05dc policies .<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6900\" src=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-secure-image.jpg\" alt=\"falco sysdig secure\" width=\"700\" height=\"320\" srcset=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-secure-image.jpg 700w, https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-secure-image-300x137.jpg 300w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><\/p>\n<p>\u05dc\u05de\u05e2\u05e9\u05d4 Sysdig Secure \u05de\u05e8\u05d7\u05d9\u05d1 \u05d0\u05ea \u05de\u05e0\u05d5\u05e2 \u05d4\u05d6\u05d9\u05d4\u05d5\u05d9 \u05e9\u05dc Falco \u05e2&quot;\u05d9 \u05db\u05da \u05e9\u05d4\u05d5\u05d0 \u05de\u05e1\u05e4\u05e7 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05de\u05e7\u05d9\u05e4\u05d4 \u05d1\u05db\u05dc \u05de\u05d7\u05d6\u05d5\u05e8 \u05d4\u05d7\u05d9\u05d9\u05dd \u05e9\u05dc Kubernetes \u05d5\u05e1\u05d1\u05d9\u05d1\u05d5\u05ea \u05e2\u05e0\u05df.<\/p>\n<h3>Sysdig Secure \u05de\u05d0\u05e4\u05e9\u05e8:<\/h3>\n<ul>\n<li>\u05dc\u05d7\u05e1\u05d5\u05dd \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05e2&quot;\u05d9 \u05d4\u05e8\u05d7\u05d1\u05ea \u05d9\u05db\u05d5\u05dc\u05d5\u05ea \u05d4\u05d6\u05d9\u05d4\u05d5\u05d9 \u05d5\u05de\u05e0\u05d9\u05e2\u05d4 \u05e9\u05dc Falco (\u05e1\u05e4\u05e6\u05d9\u05e4\u05d9\u05ea Pod Security Policies) \u05d5\u05dc\u05ea\u05ea \u05de\u05e2\u05e0\u05d4 \u05d0\u05d5\u05d8\u05d5\u05de\u05d8\u05d9 \u05e9\u05dc\u05d0 \u05de\u05e9\u05e4\u05d9\u05e2 \u05e2\u05dc \u05d4\u05d1\u05d9\u05e6\u05d5\u05e2\u05d9\u05dd<\/li>\n<li>\u05d9\u05e6\u05d9\u05e8\u05ea \u05e4\u05e8\u05d5\u05e4\u05d9\u05dc \u05de\u05d1\u05d5\u05e1\u05e1 \u05dc\u05de\u05d9\u05d3\u05ea-\u05de\u05db\u05d5\u05e0\u05d4 (ML) \u05e2\u05dd \u05e1\u05e4\u05e8\u05d9\u05d9\u05ea \u05d7\u05d5\u05e7\u05d9\u05dd \u05d5\u05e2\u05d5\u05e8\u05da \u05d7\u05d5\u05e7\u05d9\u05dd &#8211; \u05de\u05d4 \u05e9\u05de\u05e7\u05dc \u05de\u05d0\u05d5\u05d3 \u05e2\u05dc \u05d9\u05e6\u05d9\u05e8\u05d4 \u05d5\u05e2\u05d3\u05db\u05d5\u05df \u05e9\u05dc \u05d7\u05d5\u05e7\u05d9 runtime \u05e9\u05dc Falco<\/li>\n<li>\u05d4\u05ea\u05d0\u05de\u05ea \u05d4\u05d7\u05d5\u05e7\u05d9\u05dd \u05dc\u05e1\u05d1\u05d9\u05d1\u05d4 \u05e9\u05dc\u05da, \u05d1\u05d0\u05d5\u05e4\u05df \u05e9\u05de\u05e6\u05de\u05e6\u05dd \u05de\u05d0\u05d5\u05d3 \u05d0\u05ea \u05d4- false positive (\u05d4\u05ea\u05e8\u05d0\u05d5\u05ea \u05e9\u05d5\u05d5\u05d0)<\/li>\n<li>\u05d4\u05d8\u05de\u05e2\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d1\u05ea\u05d4\u05dc\u05d9\u05db\u05d9 \u05d4- DevOps \u05e9\u05dc \u05d4\u05d0\u05e8\u05d2\u05d5\u05df, \u05db\u05d5\u05dc\u05dc image scanning, security monitoring, forensics, incident response \u05d5- Audit<\/li>\n<li>\u05d0\u05d9\u05de\u05d5\u05ea \u05d4\u05ea\u05d0\u05de\u05d4 \u05dc\u05e1\u05d8\u05e0\u05d3\u05e8\u05d8\u05d9\u05dd \u05db\u05de\u05d5 PCI, NIST, HIPAA, ISO \u05d5\u05e0\u05d5\u05e1\u05e4\u05d9\u05dd<\/li>\n<li>\u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05d4\u05de\u05d1\u05d5\u05e1\u05e1 \u05e2\u05dc \u05dc\u05d5\u05d2\u05d9\u05dd \u05de\u05d4\u05e2\u05e0\u05df (\u05dc\u05de\u05e9\u05dc \u05db\u05e0\u05d9\u05e1\u05d5\u05ea \u05d7\u05e9\u05d5\u05d3\u05d5\u05ea, \u05d2\u05d9\u05e9\u05d4 \u05dc\u05e7\u05d1\u05e6\u05d9\u05dd \u05d5\u05e2\u05d5\u05d3)<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3>\u05d4\u05d3\u05d2\u05de\u05d4: Rules Library \u05d1- Sysdig<\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6899\" src=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/laptop-sysdig-secure-rules-library.jpg\" alt=\"sysdig vs falco\" width=\"1075\" height=\"624\" srcset=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/laptop-sysdig-secure-rules-library.jpg 1075w, https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/laptop-sysdig-secure-rules-library-300x174.jpg 300w, https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/laptop-sysdig-secure-rules-library-1024x594.jpg 1024w, https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/laptop-sysdig-secure-rules-library-768x446.jpg 768w\" sizes=\"auto, (max-width: 1075px) 100vw, 1075px\" \/><\/p>\n<p>&nbsp;<\/p>\n<div class=\"o-section pt-0 pb-0 u-bg-valign-center\">\n<div class=\"o-container\">\n<div class=\"row\">\n<div class=\"col u-alignwidth-wide\">\n<style>\n\t.rTb {\n\t\tdisplay: table;\n\t\twidth: 100%;\n\t}\n\t.rTbRow {\n\t\tdisplay: table-row;\n\t}\n\t.rTbHeading {\n\t\tdisplay: table-header-group;\n\t\tbackground-color: #ddd;\n\t}\n\t.rTbCell, .rTbHead {\n\t\tdisplay: table-cell;\n\t\tpadding: 3px 10px;\n\t\tborder: 1px solid #999999;\n\t\ttext-align: center;\n\t\tvertical-align: middle;\n\t}\n\t.rTbHeadLeft {\n\t\tdisplay: table-cell;\n\t\tpadding: 3px 10px;\n\t\tborder: 1px solid #999999;\n\t\ttext-align: left;\n\t\tvertical-align: middle;\n\t}\n\t.rTbCellLeft {\n\t\tdisplay: table-cell;\n\t\tpadding: 3px 10px;\n\t\tborder: 1px solid #999999;\n\t\ttext-align: left;\n\t\tvertical-align: middle;\n\t}\n\t.rTbHeading {\n\t\tdisplay: table-header-group;\n\t\tbackground-color: #ddd;\n\t\tfont-weight: bold;\n\t}\n\t.rTbFoot {\n\t\tdisplay: table-footer-group;\n\t\tfont-weight: bold;\n\t\tbackground-color: #ddd;\n\t}\n\t.rTbBody {\n\t\tdisplay: table-row-group;\n\t}\n\t.fa-check {\n\t\tcolor: green;\n\t}\n\t.fa-remove {\n\t\tcolor: red;\n\t}\n\t.fa {\n\t\tdisplay: inline-block;\n\t\tfont: normal normal normal 14px\/1 FontAwesome;\n\t\tfont-size: inherit;\n\t\ttext-rendering: auto;\n\t\t-webkit-font-smoothing: antialiased;\n\t\t-moz-osx-font-smoothing: grayscale;\n\t\ttransform: translate(0, 0);\n\t}\n\t.cAlign {\n\t\tdisplay: block;\n\t\ttext-align: center;\n\t}\n\t.hAlign {\n\t\ttext-align: center;\n\t}\n<\/style>\n<h3 class=\"text-center pb-6\">\u05d4\u05e9\u05d5\u05d5\u05d0\u05ea \u05d9\u05db\u05d5\u05dc\u05d5\u05ea \u05d5\u05e4\u05d9\u05e6'\u05e8\u05d9\u05dd: Falco \u05de\u05d5\u05dc Sysdig Secure<\/h3>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Deployment<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Licensing<\/div>\n<div class=\"rTbCell\">Sysdig proprietary licensing plus open-source components<\/div>\n<div class=\"rTbCell\">Open source Apache v2 license CNCF sandbox project<\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Installation<\/div>\n<div class=\"rTbCell\">\n                CWPP<br \/>&#8211; Daemonset via Helm<br \/>&#8211; Package manager<br \/>&#8211; Docker container<br \/>&nbsp;<br \/>CSPM<br \/>&#8211; Cloud Template<\/div>\n<div class=\"rTbCell\">&#8211; Daemonset via Helm<br \/>&#8211; Package manager<br \/>&#8211; Docker container<\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Installation support<\/div>\n<div class=\"rTbCell\">Supported by Sysdig<\/div>\n<div class=\"rTbCell\">Community supported<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Continuous CSPM<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Asset discovery<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Cloud security posture management and compliance<\/div>\n<div class=\"rTbCell\">Sysdig curated CIS AWS<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Cloud risk insights<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Threat detection based on cloud logs (i.e., suspicious logins, file access, etc.)<\/div>\n<div class=\"rTbCell\">AWS and GCP<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Context enrichment<\/div>\n<div class=\"rTbCell\">Cloud, host, containers, and Kubernetes labels<\/div>\n<div class=\"rTbCell\">Cloud, host, containers, and Kubernetes labels<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Compliance<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Compliance (CIS Benchmarks, PCI controls, NIST 800-190 controls)<\/div>\n<div class=\"rTbCell\">Continuously enforce across the lifecycle<\/div>\n<div class=\"rTbCell\">You can create compliance rules at runtime<\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Cloud benchmarks for AWS<\/div>\n<div class=\"rTbCell\">CIS<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Container and Kubernetes benchmarks<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Compliance metrics reporting and dashboards<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Guided remediation<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Runtime compliance rules based on open-source<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Detection<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Runtime detection<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Detects anomalous behavior on new logins, file access, network, system calls, storage writes<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Detects anomalous behavior on Kubernetes API calls<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">eBPF probe<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Kernel module probe<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Metadata context<\/div>\n<div class=\"rTbCell\">Cloud, host, container &amp; Kubernetes labels<\/div>\n<div class=\"rTbCell\">Cloud, host, container &amp; Kubernetes labels<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Prevention<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Deployment prevention<\/div>\n<div class=\"rTbCell\">Admission Controller<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Runtime prevention<\/div>\n<div class=\"rTbCell\">Pod Security Policy Advisor<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Response<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Block container &amp; Kubernetes threats and attacks<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Pause\/Stop\/Kill container<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Capture activity (pre and post incident) for incident response<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Default notifications channels<\/div>\n<div class=\"rTbCell\">Slack, PagerDuty, Email, Webhook, VictorOps, OpsGenie, AWS SNS<\/div>\n<div class=\"rTbCell\">Requires 3rd party components<\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Event forwarder<\/div>\n<div class=\"rTbCell\">High performance forwarder to SIEM<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Guided remediation<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Policy management<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Centralized highly scalable rule management across clusters and clouds<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Web UI for easier policy creation and customization<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Automated image profiles provided by machine learning<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Out of the box rules library<\/div>\n<div class=\"rTbCell\">Sysdig curated and supported<\/div>\n<div class=\"rTbCell\">Community created<\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Compliance tags for Falco rules<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">API to automate configuration<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Terraform provider to manage security as code <\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Additional Security<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Audit (Record of all commands executed on cloud accounts\/assets)<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\">You can build your own with an external database<\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Image scanning (Configuration validation, secrets scanning, vulnerability scanning, reporting, alerting, CI\/CD &#038; registry integrations, etc)<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Incident response and forensics<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Infrastructure and application monitoring and troubleshooting<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"16\" height=\"16\" style=\"color: green;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" fill=\"currentColor\"><path d=\"M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 26.207-9.997 36.204 0l36.203 36.204c9.997 9.997 9.997 26.206 0 36.204l-294.4 294.401c-9.998 9.997-26.207 9.997-36.204-.001z\"\/><\/svg><\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"rTb\">\n<div class=\"rTbHeading\">\n<div class=\"rTbHeadLeft\" style=\"width: 30%;\">Other Services<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Sysdig Secure<\/div>\n<div class=\"rTbHead hAlign\" style=\"width: 35%;\">Falco<\/div>\n<\/p><\/div>\n<div class=\"rTbBody\">\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Support<\/div>\n<div class=\"rTbCell\">Included with subscription<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<div class=\"rTbRow\">\n<div class=\"rTbCellLeft\">Technical account management<\/div>\n<div class=\"rTbCell\">Contact sales<\/div>\n<div class=\"rTbCell\"><svg class=\"svg-icon\" width=\"12\" height=\"12\" style=\"color: red;\" aria-hidden=\"true\" role=\"img\" focusable=\"false\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" baseProfile=\"tiny\" version=\"1.2\" viewBox=\"5.97 5.97 12.03 12.07\" fill=\"currentColor\"><path d=\"M17.414 6.586a2 2 0 00-2.828 0L12 9.172 9.414 6.586a2 2 0 10-2.828 2.828L9.171 12l-2.585 2.586a2 2 0 102.828 2.828L12 14.828l2.586 2.586c.39.391.902.586 1.414.586s1.024-.195 1.414-.586a2 2 0 000-2.828L14.829 12l2.585-2.586a2 2 0 000-2.828z\"><\/path><\/svg><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<\/div><\/div>\n<\/p><\/div>\n<\/div>\n<h3>\u05d3\u05d5\u05d2\u05de\u05d0\u05d5\u05ea: Enterprise Falco \u05d9\u05d7\u05d3 \u05e2\u05dd Sysdig Secure<\/h3>\n<h4>Runtime policy \u05d5\u05de\u05d3\u05d9\u05e0\u05d9\u05d5\u05ea \u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd <\/h4>\n<div id=\"attachment_6913\" style=\"width: 940px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-runtime-policies.jpg\" rel=\"falco-gallery\" title=\"Runtime policy \u05d5\u05de\u05d3\u05d9\u05e0\u05d9\u05d5\u05ea \u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd\"><img decoding=\"async\" aria-describedby=\"caption-attachment-6913\" class=\"size-full wp-image-6913\" src=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-runtime-policies.jpg\" alt=\"Runtime policy \u05d5\u05de\u05d3\u05d9\u05e0\u05d9\u05d5\u05ea \u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd\" width=\"930\" height=\"auto\" style=\"margin-top: 15px;\" \/><\/a><p id=\"caption-attachment-6913\" class=\"wp-caption-text\">Runtime policy \u05d5\u05de\u05d3\u05d9\u05e0\u05d9\u05d5\u05ea \u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd<\/p><\/div>\n<p>&nbsp;<\/p>\n<h4>\u05e1\u05e4\u05e8\u05d9\u05ea \u05d7\u05d5\u05e7\u05d9\u05dd (Rules Library) <\/h4>\n<div id=\"attachment_6917\" style=\"width: 940px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-rules-library.jpg\" rel=\"falco-gallery\"><img decoding=\"async\" aria-describedby=\"caption-attachment-6917\" src=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-rules-library.jpg\" alt=\"\u05e1\u05e4\u05e8\u05d9\u05ea \u05d7\u05d5\u05e7\u05d9\u05dd (Rules Library)\" width=\"930\" height=\"auto\" class=\"size-full wp-image-6917\" style=\"margin-top: 15px;\" srcset=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-rules-library.jpg 1025w, https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-rules-library-300x180.jpg 300w, https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-rules-library-768x462.jpg 768w\" sizes=\"(max-width: 1025px) 100vw, 1025px\" \/><\/a><p id=\"caption-attachment-6917\" class=\"wp-caption-text\">\u05e1\u05e4\u05e8\u05d9\u05ea \u05d7\u05d5\u05e7\u05d9\u05dd (Rules Library)<\/p><\/div>\n<p>&nbsp;<\/p>\n<h4>Remediation Actions <\/h4>\n<div id=\"attachment_6922\" style=\"width: 940px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-remediation-actions.jpg\" rel=\"falco-gallery\"><img decoding=\"async\" aria-describedby=\"caption-attachment-6922\" class=\"wp-image-6922 size-full\" src=\"https:\/\/www.almtoolbox.com\/blog_he\/wp-content\/uploads\/2021\/05\/falco-remediation-actions.jpg\" alt=\"Remediation Actions\" width=\"930\" height=\"auto\" style=\"margin-top: 15px;\" \/><\/a><p id=\"caption-attachment-6922\" class=\"wp-caption-text\">Remediation Actions<\/p><\/div>\n<p>&nbsp;<\/p>\n<div class=\"alm-box alm-contact\">\n<h4><em>\u05d0\u05e0\u05d5 \u05de\u05d9\u05d9\u05e6\u05d2\u05d9\u05dd \u05e8\u05e9\u05de\u05d9\u05ea \u05d0\u05ea \u05d7\u05d1\u05e8\u05ea Sysdig \u05d1\u05d9\u05e9\u05e8\u05d0\u05dc, \u05d5\u05de\u05e6\u05d9\u05e2\u05d9\u05dd \u05d9\u05e2\u05d5\u05e5, \u05ea\u05de\u05d9\u05db\u05d4 \u05d5\u05e8\u05e9\u05d9\u05d5\u05e0\u05d5\u05ea. \u05dc\u05de\u05d9\u05d3\u05e2 \u05e0\u05d5\u05e1\u05e3 \u05e4\u05e0\u05d5 \u05d0\u05dc\u05d9\u05e0\u05d5: <\/em><a href=\"mailto:sysdig@almtoolbox.com\" target=\"_blank\" rel=\"noopener\">sysdig@almtoolbox.com<\/a> \u05d0\u05d5 \u05d8\u05dc\u05e4\u05d5\u05e0\u05d9\u05ea 072-240-5222<\/h4>\n<\/div>\n<p>&nbsp;<\/p>\n<h3>\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05e8\u05dc\u05d1\u05e0\u05d8\u05d9\u05dd:<\/h3>\n<ul>\n<li><a href=\"https:\/\/www.almtoolbox.com\/blog_he\/sysdig-webinar-threat-detection\/\" target=\"_blank\" rel=\"noopener\">\u05d4\u05e7\u05dc\u05d8\u05d4: \u05d4\u05d2\u05e0\u05d4 \u05e2\u05dc Containers \u05d5- Kubernetes \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea Sysdig<\/a> (\u05d5\u05d5\u05d1\u05d9\u05e0\u05e8 \u05d1\u05e2\u05d1\u05e8\u05d9\u05ea)<\/li>\n<li><a href=\"https:\/\/falco.org\/\" target=\"_blank\" rel=\"noopener\">\u05d0\u05ea\u05e8 Falco<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Falco \u05d4\u05d5\u05d0 \u05e4\u05e8\u05d5\u05d9\u05d9\u05e7\u05d8 Cloud Native \u05d5\u05e7\u05d5\u05d3 \u05e4\u05ea\u05d5\u05d7 \u05dc\u05d4\u05d2\u05e0\u05ea runtime. \u05dc\u05de\u05e2\u05e9\u05d4 \u05d4\u05d5\u05d0 \u05de\u05e0\u05d5\u05e2 \u05d6\u05d9\u05d4\u05d5\u05d9 \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05dc- Kubernetes. Falco \u05e0\u05d5\u05e6\u05e8 \u05d1-2016 \u05e2&quot;\u05d9 \u05d7\u05d1\u05e8\u05ea Sysdig, \u05d5\u05d4\u05d5\u05d0 \u05e4\u05e8\u05d5\u05d9\u05d9\u05e7\u05d8 \u05d4- runtime security \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05d4\u05e6\u05d8\u05e8\u05e3 \u05dc CNCF (\u05d0\u05e8\u05d2\u05d5\u05df Cloud Native Computing Foundation). Falco \u05de\u05d6\u05d4\u05d4 \u05d4\u05ea\u05e0\u05d4\u05d2\u05d5\u05ea \u05dc\u05d0-\u05e6\u05e4\u05d5\u05d9\u05d4 \u05e9\u05dc \u05d0\u05e4\u05dc\u05d9\u05e7\u05e6\u05d9\u05d5\u05ea, \u05d5\u05de\u05ea\u05e8\u05d9\u05e2 \u05e2\u05dc \u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05d1\u05d6\u05de\u05df \u05d0\u05de\u05ea. Sysdig Secure \u05de\u05e8\u05d7\u05d9\u05d1 \u05d0\u05ea \u05d4\u05d9\u05db\u05d5\u05dc\u05d5\u05ea \u05e9\u05dc Falco \u05d1\u05d6\u05d9\u05d4\u05d5\u05d9 [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":6900,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[189,587,164,477],"tags":[478],"class_list":["post-6887","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devsecops","category-falco","category-kubernetes","category-sysdig","tag-cloud-native"],"_links":{"self":[{"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/posts\/6887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/comments?post=6887"}],"version-history":[{"count":0,"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/posts\/6887\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/media\/6900"}],"wp:attachment":[{"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/media?parent=6887"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/categories?post=6887"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog_he\/wp-json\/wp\/v2\/tags?post=6887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}