https://socake.github.io/tags/%E8%BF%90%E8%A1%8C%E6%97%B6%E5%AE%89%E5%85%A8/ Recent content in 运行时安全 on 黄文卓 | DevOps Engineer Hugo -- gohugo.io zh-CN 17691281867@163.com (Wenzhuo Huang) 17691281867@163.com (Wenzhuo Huang) © 2026 Wenzhuo Huang Fri, 03 Oct 2025 09:30:00 +0800 https://socake.github.io/posts/falco-runtime-security-deep/ Fri, 03 Oct 2025 09:30:00 +0800 17691281867@163.com (Wenzhuo Huang) https://socake.github.io/posts/falco-runtime-security-deep/ 一份来自生产环境的 Falco 实战笔记：从 eBPF 驱动选型、规则开发方法论、误报治理，到与 Falcosidekick、Loki、SIEM 的告警联动，覆盖 0.40/0.41/0.42 三个版本的关键变更与真实踩坑案例。