Changes
- Built on most recent falcosecurity/libs tag
- Updated plugin API support to latest 2.0.0 version
- Updated
scap-driver-loader
script with the most recent changes of Falco's driver loader - Support for ARM64: multiarch packages, container images, and prebuilt-drivers (to be used with
scap-driver-loader
) - Enlarged prebuilt driver matrix (5000+ drivers) and support with Falco's Kernel Crawler output
- Support to some new syscalls, and lots of generic events now have a correct syscall name
- More expressive plugin loading experience: detailed info, suggestions on which plugins to be loaded
- Improved some CLI options, such
--list
,--list-mardown
, and-L