Comment by geraldcombs
1 month ago
Pretty much. It's part of the same ecosystem as Sysdig OSS[1], which works much like strace. It uses the same underlying libraries as sysdig and Falco, and you can move capture files between them.
It'd be interesting to see if we can integrate more fully with strace as well, but that might require updating strace itself.
Why is it talking about clouds and stratospheres then? strace is pretty far from "the cloud" isn't it?
With the falco plugins [1] a broad range of "cloud native" services can be captured in Stratoshark. At the moment we have AWS cloudtrail and GCP Audit included in the macOS and Win installers.
[1] https://github.com/falcosecurity/plugins?tab=readme-ov-file#...