Skip to content

Pull requests: falcosecurity/rules

New pull request New
5 Open 310 Closed
5 Open 310 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

update(falco_rules): exclude systemd helpers from Read sensitive file… area/maturity-stable See the Rules Maturity Framework area/rules dco-signoff: yes kind/bug Something isn't working size/S
#374 opened Jul 2, 2026 by mayanksekhar Loading…
1
2
new(rules): detect GPU/accelerator cryptojacking and device access (T1496) area/maturity-sandbox See the Rules Maturity Framework area/rules dco-signoff: yes kind/feature New feature or request size/M
#373 opened Jun 23, 2026 by DevamShah Loading…
7
new(rules): detect security tool impairment in containers (T1562.001) dco-signoff: yes size/M
#367 opened May 15, 2026 by JayKnowSo Loading…
11
docs: add STYLE_GUIDE.md for rules doc comments (closes #150) dco-signoff: yes size/XL
#364 opened Apr 29, 2026 by koiakoia Loading…
1
@leogr @ekoops
16
feat(rules): detect container shell spawn for MITRE T1059 dco-signoff: yes size/M
#363 opened Apr 20, 2026 by JayKnowSo Loading…
6
ProTip! Adding no:label will show everything without a label.