Description
Falco kernel modules and eBPF probes can be built for runtime security monitoring. It is useful for security teams and operators who need driver artifacts matching their kernel or deployment environment.
Driver builds touch kernel-level monitoring components. Build from trusted sources, match kernel versions carefully, and test outside production before loading generated modules or probes.