How Falco and Stratoshark close the gap between open source runtime detection and deep forensic analysis

This announcement describes enhancements to Falco—automatic system capture (.scap) recording and field offset mapping in its plugin API—and how these features integrate with Stratoshark to provide a unified, open-source detection-to-investigation workflow for runtime security in containerized and cloud environments.