Our Kubernetes monitoring solution uses Falco events to monitor and detect abnormal container, application, host, and network activity and Falco Kubernetes audit events to monitor and detect notable or suspicious activity such as creating pods that are privileged, mount sensitive host paths, use host networking, and the like.
