Falco and Tetragon aren't 1:1 copies. You can't migrate non-kernel events like CloudTrail logs, and you have to rethink your hook points. If you are considering switching or wondering why you would, this guide from Paul Arah is your answer