# Communities **URL:** https://community.sysdig.com/c/communities/5.md [Latest](https://community.sysdig.com/latest.md) · [Categories](https://community.sysdig.com/categories.md) · [Tags](https://community.sysdig.com/tags.md) --- ## [About the Communities category](https://community.sysdig.com/t/about-the-communities-category/483)
**Author:** [@system](https://community.sysdig.com/u/system)\ **Replies:** 0\ **Last updated:** [July 23, 2025, 8:03pm UTC](https://community.sysdig.com/t/about-the-communities-category/483 "2025-07-23T20:03:03Z")
(Replace this first paragraph with a brief description of your new category. This guidance will appear in the category selection area, so try to keep it below 200 characters.) Use the following paragraphs for a longer d… --- ## [Tuning Sysdig Falco egress rules for third-party Android tool testing environments](https://community.sysdig.com/t/tuning-sysdig-falco-egress-rules-for-third-party-android-tool-testing-environments/788)
**Author:** [@michael.anderson](https://community.sysdig.com/u/michael.anderson)\ **Replies:** 0\ **Last updated:** [October 21, 2026, 12:19pm UTC](https://community.sysdig.com/t/tuning-sysdig-falco-egress-rules-for-third-party-android-tool-testing-environments/788 "2026-10-21T12:19:01Z")
We recently noticed a spike in runtime alerts inside Sysdig Secure triggered by our standard Falco rule for unexpected outbound network connections in a staging cluster. The pod in question was running automated tests fo… --- ## [I want to have SysDig OOS for digital forensics purpose](https://community.sysdig.com/t/i-want-to-have-sysdig-oos-for-digital-forensics-purpose/781)
**Author:** [@X123](https://community.sysdig.com/u/X123)\ **Replies:** 3\ **Last updated:** [October 20, 2026, 7:06pm UTC](https://community.sysdig.com/t/i-want-to-have-sysdig-oos-for-digital-forensics-purpose/781 "2026-10-20T19:06:27Z")
I already applied the commercial tool of sysDig - But I want to have the command tool to do some of commands and investigations. I have virtual server in Linux in my company that have backend of the sysDig .. Cloud you … --- ## [BSIDES Edmonton](https://community.sysdig.com/t/bsides-edmonton/594)
**Author:** [@Bodhi](https://community.sysdig.com/u/Bodhi)\ **Replies:** 5\ **Last updated:** [October 16, 2026, 7:00pm UTC](https://community.sysdig.com/t/bsides-edmonton/594 "2026-10-16T19:00:40Z")
Come on down to BSIDS, Edmonton 2025 - September 22nd, 2025 - 10:40 AM to see a session on “Intelligence-Driven Response to UNC5174: Tracking the Evolving Use of Open-Source Tools in State-Aligned Threat Campaigns” This… --- ## [What are you learning right now?](https://community.sysdig.com/t/what-are-you-learning-right-now/571)
**Author:** [@Bodhi](https://community.sysdig.com/u/Bodhi)\ **Replies:** 5\ **Last updated:** [October 16, 2026, 6:50pm UTC](https://community.sysdig.com/t/what-are-you-learning-right-now/571 "2026-10-16T18:50:00Z")
Whether you’re in school, self-taught, or coming from another field — post your favorite courses, YouTube channels, or study groups for security. Let’s help each other grow. --- ## [Troubleshooting intermittent Falco egress alerts for API calls](https://community.sysdig.com/t/troubleshooting-intermittent-falco-egress-alerts-for-api-calls/780)
**Author:** [@alicia](https://community.sysdig.com/u/alicia)\ **Replies:** 0\ **Last updated:** [October 5, 2026, 8:32pm UTC](https://community.sysdig.com/t/troubleshooting-intermittent-falco-egress-alerts-for-api-calls/780 "2026-10-05T20:32:38Z")
We recently deployed the Sysdig agent across our staging GKE cluster to monitor runtime network behavior, but we are running into an issue with unexpected rule triggers. Our backend microservices regularly poll external … --- ## [Mark your calendars for next week - Falco Virtual Community Workshop](https://community.sysdig.com/t/mark-your-calendars-for-next-week-falco-virtual-community-workshop/771)
**Author:** [@LibbySchulze](https://community.sysdig.com/u/LibbySchulze)\ **Replies:** 0\ **Last updated:** [May 20, 2026, 7:16pm UTC](https://community.sysdig.com/t/mark-your-calendars-for-next-week-falco-virtual-community-workshop/771 "2026-05-20T19:16:39Z")
:locked: Free Workshop | May 26 | 10 AM BST | 11 AM CEST | 3.30 PM IST Cloud security moves fast, and staying ahead of threats takes more than just the right tools. On May 26, we’re hosting a free 60-minute hands-on wor… --- ## [Sysdig launches Headless Security - investigate threats directly through APIs](https://community.sysdig.com/t/sysdig-launches-headless-security-investigate-threats-directly-through-apis/770)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [May 20, 2026, 6:37pm UTC](https://community.sysdig.com/t/sysdig-launches-headless-security-investigate-threats-directly-through-apis/770 "2026-05-20T18:37:58Z")
Headless Cloud Security separates backend security data and intelligence from the traditional user interface, allowing teams to investigate threats directly through APIs, automation, and AI agents like Claude. Check out… --- ## [CEMU, a popular Wii U emulator, was compromised](https://community.sysdig.com/t/cemu-a-popular-wii-u-emulator-was-compromised/769)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [May 13, 2026, 5:58pm UTC](https://community.sysdig.com/t/cemu-a-popular-wii-u-emulator-was-compromised/769 "2026-05-13T17:58:10Z")
As an avid video game collector, CEMU, is an amazing Wii U emulator that has tons of users worldwide. Through an apparent credential stealing attack from a malicious python package the attackers were able to replace two … --- ## [Prempti - policy and visibility layer for AI coding agents](https://community.sysdig.com/t/prempti-policy-and-visibility-layer-for-ai-coding-agents/768)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [May 12, 2026, 2:12pm UTC](https://community.sysdig.com/t/prempti-policy-and-visibility-layer-for-ai-coding-agents/768 "2026-05-12T14:12:00Z")
Excited to share something awesome the team has been working on: Prempti, a policy and visibility layer for AI coding agents. If you’re running Claude Code or similar tools day to day, you’ve probably wondered at some p… --- ## [Two great learning opps tomorrow - don't miss out!](https://community.sysdig.com/t/two-great-learning-opps-tomorrow-dont-miss-out/766)
**Author:** [@LibbySchulze](https://community.sysdig.com/u/LibbySchulze)\ **Replies:** 0\ **Last updated:** [May 11, 2026, 4:17pm UTC](https://community.sysdig.com/t/two-great-learning-opps-tomorrow-dont-miss-out/766 "2026-05-11T16:17:58Z")
:megaphone: Hey Falco flock! :megaphone: We’ve got TWO free learning opportunities for you to choose from TOMORROW, May 12 , and it’s worth an hour of your time. :alarm\_clock: :spiral\_calendar: :spiral\_calendar: Hands-… --- ## [Falco ruleset: OSS2Falco](https://community.sysdig.com/t/falco-ruleset-oss2falco/765)
**Author:** [@sammonsempes](https://community.sysdig.com/u/sammonsempes)\ **Replies:** 0\ **Last updated:** [May 6, 2026, 4:01pm UTC](https://community.sysdig.com/t/falco-ruleset-oss2falco/765 "2026-05-06T16:01:32Z")
Sharing a Falco ruleset I put together, based on detection logic from LinPEAS, Sigma and Splunk. Drop it in your Falco config and you’re good to go Stars welcome :star: --- ## [Docker container monitoring using Sysdig](https://community.sysdig.com/t/docker-container-monitoring-using-sysdig/724)
**Author:** [@Rupesh](https://community.sysdig.com/u/Rupesh)\ **Replies:** 6\ **Last updated:** [May 4, 2026, 11:55am UTC](https://community.sysdig.com/t/docker-container-monitoring-using-sysdig/724 "2026-05-04T11:55:16Z")
Hi Guys, I am Rupesh currently developing a toolchain to create a syscall profile for Java based docker applications. I am currently using sysdig to monitor .jar .so and binaries by open,openat,mmap and execve events o… --- ## [Join the Falco CNCF livestream next week!](https://community.sysdig.com/t/join-the-falco-cncf-livestream-next-week/764)
**Author:** [@LibbySchulze](https://community.sysdig.com/u/LibbySchulze)\ **Replies:** 0\ **Last updated:** [April 30, 2026, 7:29pm UTC](https://community.sysdig.com/t/join-the-falco-cncf-livestream-next-week/764 "2026-04-30T19:29:23Z")
Hey folx! :wave: Join us next Wednesday (5/6) for a Falco maintainer livestream! We’ll be covering the latest advancements and strategic direction of the project including the new Falco Operator, performance and reliabi… --- ## [Alessandro Cannarella will be at KCD New York in June 2026](https://community.sysdig.com/t/alessandro-cannarella-will-be-at-kcd-new-york-in-june-2026/763)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [April 21, 2026, 11:51am UTC](https://community.sysdig.com/t/alessandro-cannarella-will-be-at-kcd-new-york-in-june-2026/763 "2026-04-21T11:51:32Z")
Alessandro Cannarella, Falco maintainer and Sysdig open source engineer, will be a panelist at KCD New York on June 10th, 2026. https://kcdnewyork.com/ The panel is called “When Domains Collide: AI, Security & FinOps I… --- ## [Reminder: Falco Community Survey is still open!](https://community.sysdig.com/t/reminder-falco-community-survey-is-still-open/755)
**Author:** [@LibbySchulze](https://community.sysdig.com/u/LibbySchulze)\ **Replies:** 0\ **Last updated:** [March 16, 2026, 4:35pm UTC](https://community.sysdig.com/t/reminder-falco-community-survey-is-still-open/755 "2026-03-16T16:35:12Z")
Hey Falco community! Quick reminder that our community survey is still open — we’ve extended it through Wednesday (3/18). If you have ~5 minutes, we’d really appreciate hearing how you’re using Falco. Your feedback hel… --- ## [High system call latency and "scap" file bloat during external script injection](https://community.sysdig.com/t/high-system-call-latency-and-scap-file-bloat-during-external-script-injection/738)
**Author:** [@ulanda667](https://community.sysdig.com/u/ulanda667)\ **Replies:** 2\ **Last updated:** [March 3, 2026, 1:28pm UTC](https://community.sysdig.com/t/high-system-call-latency-and-scap-file-bloat-during-external-script-injection/738 "2026-03-03T13:28:18Z")
Hi everyone, I’ve been using Sysdig OSS to perform some forensic analysis on a staging environment where we test various automation scripts. I’ve run into a specific issue where the .scap files become massive—much larger… --- ## [Curling, Cocktails and Conversations - Chicago](https://community.sysdig.com/t/curling-cocktails-and-conversations-chicago/753)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [March 2, 2026, 5:04pm UTC](https://community.sysdig.com/t/curling-cocktails-and-conversations-chicago/753 "2026-03-02T17:04:33Z")
Calling all cloud-native and open source builders — join Sysdig for an afternoon of indoor curling, great conversations, and practical insights into real-time cloud and container security. We’ll touch on runtime risk, r… --- ## [Curling, Cocktails and Conversations - Dallas](https://community.sysdig.com/t/curling-cocktails-and-conversations-dallas/752)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [March 2, 2026, 5:02pm UTC](https://community.sysdig.com/t/curling-cocktails-and-conversations-dallas/752 "2026-03-02T17:02:53Z")
Calling all cloud-native and open source builders — join Sysdig for an afternoon of indoor curling, great conversations, and practical insights into real-time cloud and container security. We’ll touch on runtime risk, r… --- ## [Falco Plugin for OpenClaw](https://community.sysdig.com/t/falco-plugin-for-openclaw/747)
**Author:** [@takao.shimizu](https://community.sysdig.com/u/takao.shimizu)\ **Replies:** 1\ **Last updated:** [March 2, 2026, 1:45pm UTC](https://community.sysdig.com/t/falco-plugin-for-openclaw/747 "2026-03-02T13:45:12Z")
Hi, I have developed a Falco plugin for OpenClaw. https://falcoya.dev/openclaw --- ## [Falco Flock - we want to hear from you!](https://community.sysdig.com/t/falco-flock-we-want-to-hear-from-you/737)
**Author:** [@LibbySchulze](https://community.sysdig.com/u/LibbySchulze)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 8:53pm UTC](https://community.sysdig.com/t/falco-flock-we-want-to-hear-from-you/737 "2026-02-26T20:53:57Z")
Hi everyone! We invite you all to take 5 minutes to respond to our new community survey. We would love for you all to share how you’re using Falco, as it helps us continue to build the community you want! Click here to … --- ## [Falco hands-on workshop at KubeCon Europe - March 23, 2026](https://community.sysdig.com/t/falco-hands-on-workshop-at-kubecon-europe-march-23-2026/736)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [February 24, 2026, 9:22pm UTC](https://community.sysdig.com/t/falco-hands-on-workshop-at-kubecon-europe-march-23-2026/736 "2026-02-24T21:22:41Z")
Hello wonderful OSS community! We have an upcoming in-person workshop at KubeCon Europe, happening on Monday, March 23rd, at 2-4PM (14:00-16:00). We would love to have as many of you as possible join us for a 2h hands-o… --- ## [The incredibly strange behavior of MJ Rathbun](https://community.sysdig.com/t/the-incredibly-strange-behavior-of-mj-rathbun/734)
**Author:** [@jonasrosland](https://community.sysdig.com/u/jonasrosland)\ **Replies:** 0\ **Last updated:** [February 18, 2026, 8:38pm UTC](https://community.sysdig.com/t/the-incredibly-strange-behavior-of-mj-rathbun/734 "2026-02-18T20:38:49Z")
If you’ve been following the AI + open source community for the past week, you’ve probably heard some rumblings about Moltbot (formerly known as Clawdbot), and how it can be deployed to autonomously do tasks for you. Som… --- ## [Real-time Web Attack Detection with Falco + Nginx Plugin](https://community.sysdig.com/t/real-time-web-attack-detection-with-falco-nginx-plugin/699)
**Author:** [@takao.shimizu](https://community.sysdig.com/u/takao.shimizu)\ **Replies:** 2\ **Last updated:** [January 13, 2026, 7:13am UTC](https://community.sysdig.com/t/real-time-web-attack-detection-with-falco-nginx-plugin/699 "2026-01-13T07:13:08Z")
I’ve created a Falco plugin for Nginx, and the prototype is currently published. I’ve completed the E2E testing up to phase 1. We’re now in phase 2 of the E2E testing :slight\_smile: --- ## [Falco lightning talk at Booth 530 (Wednesday 12 Nov)](https://community.sysdig.com/t/falco-lightning-talk-at-booth-530-wednesday-12-nov/718)
**Author:** [@Nigeldouglas](https://community.sysdig.com/u/Nigeldouglas)\ **Replies:** 0\ **Last updated:** [November 11, 2025, 9:55pm UTC](https://community.sysdig.com/t/falco-lightning-talk-at-booth-530-wednesday-12-nov/718 "2025-11-11T21:55:28Z")
The amazing Blair Howard is delivering a talk about how to augment your existing Falco configuration at the Cloudsmith Booth (530) at Kubecon NA in Atlanta, Georgia. Time: 1:45pm Speaker: Blair Howard Outcome: Learn h… --- ## [Senior Software Engineer - Runtime Flexible - USAEngineering – SECURE /Regular - Full Time /Remote](https://community.sysdig.com/t/senior-software-engineer-runtime-flexible-usaengineering-secure-regular-full-time-remote/716)
**Author:** [@Bodhi](https://community.sysdig.com/u/Bodhi)\ **Replies:** 0\ **Last updated:** [November 10, 2025, 8:09pm UTC](https://community.sysdig.com/t/senior-software-engineer-runtime-flexible-usaengineering-secure-regular-full-time-remote/716 "2025-11-10T20:09:08Z")
:link: Senior Software Engineer - Runtime:link: Flexible - USA Engineering – SECURE / Regular - Full Time / Remote At Sysdig, we believe cloud security isn’t a compromise - it’s a promise. From the start, our mission… --- ## [Senior Software Engineer Flexible - USAEngineering – SECURE /Regular - Full Time /Remote](https://community.sysdig.com/t/senior-software-engineer-flexible-usaengineering-secure-regular-full-time-remote/715)
**Author:** [@Bodhi](https://community.sysdig.com/u/Bodhi)\ **Replies:** 0\ **Last updated:** [November 10, 2025, 8:07pm UTC](https://community.sysdig.com/t/senior-software-engineer-flexible-usaengineering-secure-regular-full-time-remote/715 "2025-11-10T20:07:31Z")
:link: Senior Software Engineer:link: Flexible - USA Engineering – SECURE / Regular - Full Time / Remote At Sysdig, we believe cloud security isn’t a compromise - it’s a promise. From the start, our mission has been … --- ## [Senior Quality Engineer Flexible - Italy / Flexible - Spain / Flexible - SerbiaEngineering – SECURE QE /Regular - Full Time /Remote](https://community.sysdig.com/t/senior-quality-engineer-flexible-italy-flexible-spain-flexible-serbiaengineering-secure-qe-regular-full-time-remote/714)
**Author:** [@Bodhi](https://community.sysdig.com/u/Bodhi)\ **Replies:** 0\ **Last updated:** [November 10, 2025, 8:05pm UTC](https://community.sysdig.com/t/senior-quality-engineer-flexible-italy-flexible-spain-flexible-serbiaengineering-secure-qe-regular-full-time-remote/714 "2025-11-10T20:05:47Z")
:link: Senior Quality Engineer:link: Flexible - Italy / Flexible - Spain / Flexible - Serbia Engineering – SECURE QE / Regular - Full Time / Remote At Sysdig, we believe cloud security isn’t a compromise - it’s a pro… --- ## [Threat Detection Engineer (Categorie protette ex art. 1 L. 68/99) Flexible - ItalyEngineering – THREAT RESEARCH /Regular - Full Time /Remote](https://community.sysdig.com/t/threat-detection-engineer-categorie-protette-ex-art-1-l-68-99-flexible-italyengineering-threat-research-regular-full-time-remote/713)
**Author:** [@Bodhi](https://community.sysdig.com/u/Bodhi)\ **Replies:** 0\ **Last updated:** [November 10, 2025, 8:03pm UTC](https://community.sysdig.com/t/threat-detection-engineer-categorie-protette-ex-art-1-l-68-99-flexible-italyengineering-threat-research-regular-full-time-remote/713 "2025-11-10T20:03:23Z")
:link: Threat Detection Engineer:link: (Categorie protette ex art. 1 L. 68/99) Flexible - ItalyEngineering – THREAT RESEARCH /Regular - Full Time /Remote At Sysdig, we believe cloud security isn’t a compromise - it’s … --- ## [Senior Infrastructure Engineer Flexible - USAEngineering – INFRASTRUCTURE /Regular - Full Time /Remote](https://community.sysdig.com/t/senior-infrastructure-engineer-flexible-usaengineering-infrastructure-regular-full-time-remote/712)
**Author:** [@Bodhi](https://community.sysdig.com/u/Bodhi)\ **Replies:** 0\ **Last updated:** [November 10, 2025, 8:00pm UTC](https://community.sysdig.com/t/senior-infrastructure-engineer-flexible-usaengineering-infrastructure-regular-full-time-remote/712 "2025-11-10T20:00:32Z")
:link: Senior Infrastructure Engineer:link: Flexible - USA Engineering – INFRASTRUCTURE / Regular - Full Time / Remote At Sysdig, we believe cloud security isn’t a compromise - it’s a promise. From the start, our mis… [Next page](https://community.sysdig.com/c/communities/5.md?page=1)