Kubernetes Falco Rules

1

cd /etc/falco

1

grep -r "Package management process launched" .

1

cp falco_rules.yaml falco_rules.yaml.bak

1

vi falco_rules.local.yaml