{
  "schema_version": "REFERENCE-1.0",
  "as_of": "2026-10-23",
  "item": {
    "id": "TOOL-0316",
    "kind": "TOOL",
    "title": "Falco",
    "last_verified": "2026-10-23",
    "currentness": "VERIFIED_AS_OF",
    "revision": 1,
    "summary": "event観測・rule判定・alertに使うruntime挙動検知ツールです。",
    "tool_type": "runtime挙動検知ツール",
    "access_modes": [
      "agent",
      "CLI",
      "rule configuration"
    ],
    "getting_started": "公式の利用開始案内でFalcoの対応環境・導入方法・利用条件を確認し、検証用の環境へ用意します。",
    "capabilities": [
      "event観測",
      "rule判定",
      "alert"
    ],
    "requirements": [
      "自分が管理する検証資産と検査権限",
      "診断の対象範囲・秘密の扱いと利用条件を確認する"
    ],
    "suitable_for": "Falcoで無害な検証eventの検知経路を確認するなど、event観測の利用経路を選びたい場面。",
    "unsuitable_for": "alertの有無だけで侵害の有無を断定する用途。",
    "coverage": [
      "security"
    ],
    "canonical_url": "https://enterprise-ai-dictionary.com/reference/tools/tool-0316",
    "retrieval": "FULL",
    "publication": "PUBLIC_NO_ADS",
    "index": "INDEX",
    "ads": "OFF",
    "link_policy": "DIRECT"
  },
  "relations": [
    {
      "id": "REFREL-39b328bae60416a1",
      "subject_id": "SRC-EVID-REF-0391",
      "predicate": "documents",
      "object_id": "TOOL-0316",
      "scope_note": "公開一次資料に基づく利用経路。",
      "last_verified": "2026-10-23",
      "source_ids": [
        "SRC-EVID-REF-0391"
      ]
    },
    {
      "id": "REFREL-1525981a8d458ad5",
      "subject_id": "TOOL-0316",
      "predicate": "supports",
      "object_id": "METHOD-0417",
      "scope_note": "公開一次資料に基づく利用経路。",
      "last_verified": "2026-10-23",
      "source_ids": [
        "SRC-EVID-REF-0391"
      ]
    },
    {
      "id": "REFREL-249206fd8a791dee",
      "subject_id": "METHOD-0417",
      "predicate": "uses",
      "object_id": "TOOL-0316",
      "scope_note": "公開一次資料に基づく利用経路。",
      "last_verified": "2026-10-23",
      "source_ids": [
        "SRC-EVID-REF-0391"
      ]
    },
    {
      "id": "REFREL-c2d89513ff2875a5",
      "subject_id": "IDX-C05-009",
      "predicate": "explains",
      "object_id": "TOOL-0316",
      "scope_note": "既存TERMの運用上の説明を読む経路。製品の定義を主張しない。",
      "last_verified": "2026-10-23",
      "source_ids": [
        "SRC-EVID-REF-0391"
      ]
    }
  ]
}