You can find below the officially registered plugins, more details on https://github.com/falcosecurity/plugins . .source { background-color: #727d8d; border: none; color: #fff; padding: 4px 5px; border-radius: 5px; } ID Plugin Type Source Description Authors URL Rules URL Licence 1 k8saudit sourcing k8s_audit Read Kubernetes Audit Events and monitor Kubernetes Clusters The Falco Authors π π Apache-2.0 2 cloudtrail sourcing aws_cloudtrail Reads Cloudtrail JSON logs from files/S3 and injects as events The Falco Authors π π Apache-2.0 - json extraction Extract values from any JSON payload The Fal