├── .clang-format ├── .clang-tidy ├── .cursor └── rules │ ├── shell-style-guide.mdc │ └── testing-guide.mdc ├── .dockerignore ├── .github ├── DISCUSSION_TEMPLATE │ └── adopters.yml ├── ISSUE_TEMPLATE │ ├── BUG.md │ ├── DOCUMENTATION.md │ └── FEATURE.md ├── PULL_REQUEST_TEMPLATE.md ├── actions │ ├── build-dependencies │ │ └── action.yaml │ ├── generate-kernel-matrix │ │ └── action.yaml │ ├── pull-test-images │ │ └── action.yaml │ ├── run-e2e-tests │ │ └── action.yaml │ ├── run-integration-tests │ │ └── action.yaml │ ├── run-unit-tests │ │ └── action.yaml │ ├── setup-tracee-alpine │ │ └── action.yaml │ ├── setup-tracee-ubuntu │ │ └── action.yaml │ └── test-go-module │ │ └── action.yaml ├── copilot-instructions.md ├── data │ └── kernel-test-matrix.json ├── dependabot.yaml ├── labeler.yml └── workflows │ ├── auto-author-assign.yml │ ├── codeql.yaml │ ├── fast-forward.yaml │ ├── labeler.yml │ ├── mkdocs-dev.yaml │ ├── mkdocs-latest.yaml │ ├── performance.yaml │ ├── pr-ff.yaml │ ├── pr-sync.yaml │ ├── pr.yaml │ ├── publish-helm.yaml │ ├── release-snapshot.yaml │ ├── release.yaml │ ├── test-daily.yaml │ └── test-helm-chart.yaml ├── .gitignore ├── .gitmodules ├── .revive.toml ├── 3rdparty └── .gitignore ├── LICENSE ├── Makefile ├── NOTICE ├── RELEASING.md ├── Readme.md ├── SECURITY.md ├── Vagrantfile ├── api ├── go.mod ├── go.sum └── v1beta1 │ ├── datasource.pb.go │ ├── datasource.pb.json.go │ ├── datasource.proto │ ├── datasource_grpc.pb.go │ ├── definition.pb.go │ ├── definition.pb.json.go │ ├── definition.proto │ ├── diagnostic.pb.go │ ├── diagnostic.pb.json.go │ ├── diagnostic.proto │ ├── diagnostic_grpc.pb.go │ ├── event.pb.go │ ├── event.pb.json.go │ ├── event.proto │ ├── event_data.pb.go │ ├── event_data.pb.json.go │ ├── event_data.proto │ ├── threat.pb.go │ ├── threat.pb.json.go │ ├── threat.proto │ ├── tracee.pb.go │ ├── tracee.pb.json.go │ ├── tracee.proto │ └── tracee_grpc.pb.go ├── brand ├── Tracee-OSS-Logo-Color-Horizontal-RGB-2022.png ├── Tracee-OSS-Logo-Color-Horizontal-RGB-2022.svg ├── Tracee-OSS-Logo-Color-Stacked-RGB-2022.png ├── Tracee-OSS-Logo-Color-Stacked-RGB-2022.svg ├── Tracee-OSS-Logo-White-Horizontal-RGB-2022.png ├── Tracee-OSS-Logo-White-Horizontal-RGB-2022.svg ├── Tracee-OSS-Logo-White-Stacked-RGB-2022.png ├── Tracee-OSS-Logo-White-Stacked-RGB-2022.svg └── readme.md ├── cmd ├── evt │ ├── cmd │ │ ├── helpers │ │ │ └── helpers.go │ │ ├── root.go │ │ └── trigger │ │ │ ├── cobra.go │ │ │ ├── trigger.go │ │ │ └── triggers │ │ │ ├── arch_prctl.sh │ │ │ ├── bpf_attach.sh │ │ │ ├── commit_creds.sh │ │ │ ├── common │ │ │ ├── bpftrace.sh │ │ │ ├── docker.sh │ │ │ ├── mktemp-ln-rm.sh │ │ │ ├── ping.sh │ │ │ ├── self-comm.sh │ │ │ ├── sudo.sh │ │ │ ├── timeout-nc.sh │ │ │ ├── true.sh │ │ │ └── unshare-mkdir.sh │ │ │ ├── debugfs_create_dir.sh │ │ │ ├── debugfs_create_file.sh │ │ │ ├── device_add.sh │ │ │ ├── do_truncate.sh │ │ │ ├── kallsyms_lookup_name.sh │ │ │ ├── kprobe_attach.sh │ │ │ ├── magic_write.sh │ │ │ ├── process_execute_failed.sh │ │ │ ├── ptrace.sh │ │ │ ├── sched_process_exec.sh │ │ │ ├── sched_process_exit.sh │ │ │ ├── sched_process_fork.sh │ │ │ ├── security_bpf_prog.sh │ │ │ ├── security_file_open.sh │ │ │ ├── security_inode_symlink.sh │ │ │ ├── security_inode_unlink.sh │ │ │ ├── security_path_notify.sh │ │ │ ├── security_sb_mount.sh │ │ │ ├── security_socket_bind.sh │ │ │ ├── security_socket_connect.sh │ │ │ ├── security_socket_create.sh │ │ │ ├── shared_object_loaded.sh │ │ │ ├── socked_dup.sh │ │ │ └── switch_task_ns.sh │ └── main.go ├── lsm_support_check │ └── lsm_check.go ├── tracee-bench │ ├── main.go │ ├── main_test.go │ ├── prometheus.sh │ ├── prometheus.yml │ └── readme.md ├── tracee-operator │ └── main.go ├── tracee │ ├── cmd │ │ ├── analyze.go │ │ ├── list.go │ │ ├── man.go │ │ ├── man_test.go │ │ ├── root.go │ │ └── version.go │ └── main.go └── traceectl │ ├── Makefile │ ├── cmd │ ├── event.go │ ├── metrics.go │ ├── root.go │ ├── stream.go │ └── version.go │ ├── go.mod │ ├── go.sum │ ├── main.go │ ├── pkg │ ├── client │ │ ├── client.go │ │ ├── diagnostic.go │ │ └── service.go │ ├── cmd │ │ ├── cobra │ │ │ ├── event.go │ │ │ ├── metrics.go │ │ │ ├── stream.go │ │ │ └── version.go │ │ ├── event.go │ │ ├── flags │ │ │ ├── format.go │ │ │ ├── format_test.go │ │ │ ├── output.go │ │ │ ├── output_test.go │ │ │ ├── server.go │ │ │ └── server_test.go │ │ ├── metrics.go │ │ ├── printer │ │ │ ├── event.go │ │ │ └── printer.go │ │ ├── stream.go │ │ └── version.go │ └── config │ │ └── config.go │ └── test │ └── server.go ├── codecov.yml ├── common ├── README.md ├── bitwise │ ├── bitwise.go │ └── bitwise_test.go ├── bucketcache │ ├── bucketcache.go │ ├── bucketcache_bench_test.go │ └── bucketcache_test.go ├── capabilities │ ├── capabilities.go │ └── capabilities_test.go ├── cgroup │ ├── cgroup.go │ └── errors.go ├── changelog │ ├── changelog.go │ ├── changelog_benchmark_test.go │ ├── changelog_test.go │ └── entry.go ├── counter │ ├── counter.go │ ├── counter_bench_test.go │ └── counter_test.go ├── digest │ ├── cache.go │ ├── hash.go │ ├── hash_bench_test.go │ ├── hash_test.go │ └── key.go ├── elf │ ├── analyzer.go │ ├── analyzer_test.go │ ├── go.go │ ├── go_test.go │ ├── symbols.go │ └── symbols_test.go ├── environment │ ├── amount_cpus.go │ ├── amount_mem.go │ ├── amount_test.go │ ├── kernel_config.go │ ├── kernel_config_test.go │ ├── kernel_version.go │ ├── kernel_version_test.go │ ├── lsm.go │ ├── lsm_test.go │ ├── osinfo.go │ ├── osinfo_test.go │ └── testdata │ │ ├── config_comments │ │ ├── config_comments.gz │ │ ├── config_standard.gz │ │ ├── os-release-almalinux │ │ ├── os-release-centos │ │ ├── os-release-debian │ │ ├── os-release-rhel │ │ └── os-release-ubuntu ├── errfmt │ ├── errfmt.go │ └── errfmt_test.go ├── fileutil │ ├── fileutil.go │ └── fileutil_test.go ├── go.mod ├── go.sum ├── interfaces │ └── interfaces.go ├── logger │ ├── callerinfo.go │ ├── callerinfo_test.go │ ├── filter.go │ ├── filter_test.go │ ├── logcounter.go │ ├── logger.go │ └── logger_test.go ├── mount │ ├── errors.go │ ├── mount.go │ └── mount_test.go ├── murmur │ ├── murmur.go │ └── murmur_test.go ├── parsers │ ├── data_parsers.go │ ├── data_parsers_amd64.go │ ├── data_parsers_arm64.go │ ├── data_parsers_bench_test.go │ ├── data_parsers_test.go │ ├── file_parsers.go │ └── network_parsers.go ├── proc │ ├── exe.go │ ├── formatters.go │ ├── ns.go │ ├── ns_bench_test.go │ ├── ns_test.go │ ├── parsers.go │ ├── readfile.go │ ├── readfile_bench_test.go │ ├── readfile_test.go │ ├── stat.go │ ├── stat_bench_test.go │ ├── stat_test.go │ ├── status.go │ ├── status_bench_test.go │ ├── status_test.go │ └── uptime.go ├── set │ ├── set.go │ ├── set_test.go │ └── simpleset.go ├── sharedobjs │ ├── host_symbols_loader.go │ ├── host_symbols_loader_test.go │ └── shared_object.go ├── stringutil │ ├── stringutil.go │ ├── stringutil_bench_test.go │ └── stringutil_test.go ├── system │ ├── monitor.go │ └── monitor_test.go ├── tests │ ├── helpers.go │ └── helpers_test.go └── timeutil │ ├── time.go │ └── time_test.go ├── deploy ├── boilerplate.go.txt ├── generate-k8s-static.yaml ├── grafana │ ├── README.md │ └── tracee.json ├── helm │ ├── chart_schema.yaml │ ├── ct.yaml │ ├── lintconf.yaml │ └── tracee │ │ ├── .helmignore │ │ ├── Chart.yaml │ │ ├── crds │ │ └── tracee.aquasec.com_policies.yaml │ │ ├── templates │ │ ├── NOTES.txt │ │ ├── _helpers.tpl │ │ ├── clusterrolebinding.yaml │ │ ├── daemonset.yaml │ │ ├── default-policy.yaml │ │ ├── deploy.yaml │ │ ├── role.yaml │ │ ├── serviceaccount.yaml │ │ ├── tracee-config.yaml │ │ └── tracee-templates.yaml │ │ └── values.yaml └── kubernetes │ └── tracee │ ├── kustomization.yaml │ ├── tracee.aquasec.com_policies.yaml │ └── tracee.yaml ├── docs ├── contributing │ ├── adding-events.md │ ├── building │ │ ├── building.md │ │ ├── containers.md │ │ └── environment.md │ ├── checkpatch.md │ ├── event-documentation-guide.md │ ├── guidelines.md │ ├── kubernetes.md │ ├── overview.md │ ├── performance.md │ ├── setup-development-machine-with-vagrant.md │ └── testing-coverage.md ├── docs │ ├── advanced │ │ ├── data-sources │ │ │ ├── builtin │ │ │ │ ├── containers.md │ │ │ │ ├── dns.md │ │ │ │ └── process-tree.md │ │ │ ├── custom.md │ │ │ ├── overview.md │ │ │ └── write.md │ │ ├── forensics.md │ │ ├── ordering-events.md │ │ └── secure-tracing.md │ ├── events │ │ ├── builtin │ │ │ ├── man │ │ │ │ ├── lifecycle │ │ │ │ │ ├── cgroup_attach_task.md │ │ │ │ │ ├── cgroup_mkdir.md │ │ │ │ │ ├── cgroup_rmdir.md │ │ │ │ │ ├── container_create.md │ │ │ │ │ ├── container_remove.md │ │ │ │ │ ├── do_exit.md │ │ │ │ │ ├── existing_container.md │ │ │ │ │ ├── init_namespaces.md │ │ │ │ │ ├── sched_process_exec.md │ │ │ │ │ ├── sched_process_exit.md │ │ │ │ │ ├── sched_process_fork.md │ │ │ │ │ ├── sched_switch.md │ │ │ │ │ └── switch_task_ns.md │ │ │ │ ├── lsm │ │ │ │ │ ├── cap_capable.md │ │ │ │ │ ├── security_bpf.md │ │ │ │ │ ├── security_bpf_map.md │ │ │ │ │ ├── security_bpf_prog.md │ │ │ │ │ ├── security_bprm_check.md │ │ │ │ │ ├── security_file_mprotect.md │ │ │ │ │ ├── security_file_open.md │ │ │ │ │ ├── security_inode_mknod.md │ │ │ │ │ ├── security_inode_rename.md │ │ │ │ │ ├── security_inode_unlink.md │ │ │ │ │ ├── security_kernel_post_read_file.md │ │ │ │ │ ├── security_kernel_read_file.md │ │ │ │ │ ├── security_mmap_file.md │ │ │ │ │ ├── security_path_notify.md │ │ │ │ │ ├── security_sb_mount.md │ │ │ │ │ ├── security_sb_umount.md │ │ │ │ │ ├── security_settime64.md │ │ │ │ │ ├── security_socket_accept.md │ │ │ │ │ ├── security_socket_bind.md │ │ │ │ │ ├── security_socket_connect.md │ │ │ │ │ ├── security_socket_create.md │ │ │ │ │ ├── security_socket_listen.md │ │ │ │ │ ├── security_socket_setsockopt.md │ │ │ │ │ └── security_task_setrlimit.md │ │ │ │ ├── misc │ │ │ │ │ ├── __kernel_write.md │ │ │ │ │ ├── bpf_attach.md │ │ │ │ │ ├── call_usermodehelper.md │ │ │ │ │ ├── chmod_common.md │ │ │ │ │ ├── commit_creds.md │ │ │ │ │ ├── debugfs_create_dir.md │ │ │ │ │ ├── debugfs_create_file.md │ │ │ │ │ ├── device_add.md │ │ │ │ │ ├── dirty_pipe_splice.md │ │ │ │ │ ├── do_init_module.md │ │ │ │ │ ├── do_mmap.md │ │ │ │ │ ├── do_sigaction.md │ │ │ │ │ ├── do_truncate.md │ │ │ │ │ ├── file_modification.md │ │ │ │ │ ├── hooked_seq_ops.md │ │ │ │ │ ├── inotify_watch.md │ │ │ │ │ ├── kallsyms_lookup_name.md │ │ │ │ │ ├── kprobe_attach.md │ │ │ │ │ ├── load_elf_phdrs.md │ │ │ │ │ ├── magic_write.md │ │ │ │ │ ├── net_tcp_connect.md │ │ │ │ │ ├── print_mem_dump.md │ │ │ │ │ ├── proc_create.md │ │ │ │ │ ├── process_execute_failed.md │ │ │ │ │ ├── register_chrdev.md │ │ │ │ │ ├── set_fs_pwd.md │ │ │ │ │ ├── shared_object_loaded.md │ │ │ │ │ ├── socket_accept.md │ │ │ │ │ ├── socket_dup.md │ │ │ │ │ ├── symbols_collision.md │ │ │ │ │ ├── task_rename.md │ │ │ │ │ ├── tracee_info.md │ │ │ │ │ ├── vfs_read.md │ │ │ │ │ ├── vfs_readv.md │ │ │ │ │ ├── vfs_utimes.md │ │ │ │ │ ├── vfs_write.md │ │ │ │ │ └── vfs_writev.md │ │ │ │ ├── network │ │ │ │ │ ├── net_flow_tcp_begin.md │ │ │ │ │ ├── net_flow_tcp_end.md │ │ │ │ │ ├── net_packet_dns.md │ │ │ │ │ ├── net_packet_dns_request.md │ │ │ │ │ ├── net_packet_dns_response.md │ │ │ │ │ ├── net_packet_http.md │ │ │ │ │ ├── net_packet_http_request.md │ │ │ │ │ ├── net_packet_http_response.md │ │ │ │ │ ├── net_packet_icmp.md │ │ │ │ │ ├── net_packet_icmpv6.md │ │ │ │ │ ├── net_packet_ipv4.md │ │ │ │ │ ├── net_packet_ipv6.md │ │ │ │ │ ├── net_packet_tcp.md │ │ │ │ │ └── net_packet_udp.md │ │ │ │ ├── security │ │ │ │ │ ├── anti_debugging.md │ │ │ │ │ ├── aslr_inspection.md │ │ │ │ │ ├── cgroup_notify_on_release_modification.md │ │ │ │ │ ├── cgroup_release_agent_modification.md │ │ │ │ │ ├── core_pattern_modification.md │ │ │ │ │ ├── default_loader_modification.md │ │ │ │ │ ├── disk_mount.md │ │ │ │ │ ├── docker_abuse.md │ │ │ │ │ ├── dropped_executable.md │ │ │ │ │ ├── dynamic_code_loading.md │ │ │ │ │ ├── fileless_execution.md │ │ │ │ │ ├── ftrace_hook.md │ │ │ │ │ ├── hidden_file_created.md │ │ │ │ │ ├── hidden_kernel_module.md │ │ │ │ │ ├── hooked_syscall.md │ │ │ │ │ ├── illegitimate_shell.md │ │ │ │ │ ├── kernel_module_loading.md │ │ │ │ │ ├── kubernetes_api_connection.md │ │ │ │ │ ├── kubernetes_certificate_theft_attempt.md │ │ │ │ │ ├── ld_preload.md │ │ │ │ │ ├── mem_prot_alert.md │ │ │ │ │ ├── proc_fops_hooking.md │ │ │ │ │ ├── proc_kcore_read.md │ │ │ │ │ ├── proc_mem_access.md │ │ │ │ │ ├── proc_mem_code_injection.md │ │ │ │ │ ├── process_vm_write_code_injection.md │ │ │ │ │ ├── ptrace_code_injection.md │ │ │ │ │ ├── rcd_modification.md │ │ │ │ │ ├── sched_debug_recon.md │ │ │ │ │ ├── scheduled_task_modification.md │ │ │ │ │ ├── stack_pivot.md │ │ │ │ │ ├── stdio_over_socket.md │ │ │ │ │ ├── sudoers_modification.md │ │ │ │ │ ├── suspicious_syscall_source.md │ │ │ │ │ ├── symbols_loaded.md │ │ │ │ │ ├── syscall_table_hooking.md │ │ │ │ │ └── system_request_key_config_modification.md │ │ │ │ └── syscalls │ │ │ │ │ ├── sys_enter.md │ │ │ │ │ └── sys_exit.md │ │ │ ├── network-events.md │ │ │ ├── security-events.md │ │ │ └── syscall-events.md │ │ ├── custom │ │ │ ├── golang.md │ │ │ └── overview.md │ │ └── index.md │ ├── flags │ │ ├── capabilities.1.md │ │ ├── capture.1.md │ │ ├── config.1.md │ │ ├── containers.1.md │ │ ├── events.1.md │ │ ├── log.1.md │ │ ├── output.1.md │ │ ├── scope.1.md │ │ └── server.1.md │ ├── install │ │ ├── capabilities.md │ │ ├── config │ │ │ ├── cli.md │ │ │ ├── index.md │ │ │ └── kubernetes.md │ │ ├── container-engines.md │ │ ├── docker.md │ │ ├── healthz.md │ │ ├── index.md │ │ ├── kernel-symbols.md │ │ ├── kubernetes.md │ │ ├── lsm-support.md │ │ ├── mac-faq.md │ │ ├── os-requirements.md │ │ ├── prerequisites.md │ │ └── prometheus.md │ ├── outputs │ │ ├── event-structure.md │ │ ├── index.md │ │ ├── logging.md │ │ ├── output-formats.md │ │ └── output-options.md │ ├── overview.md │ ├── policies │ │ ├── index.md │ │ ├── rules.md │ │ ├── scopes.md │ │ └── usage │ │ │ ├── cli.md │ │ │ └── kubernetes.md │ └── troubleshooting.md ├── images │ ├── architecture.png │ ├── ebpftraceehelminstall.png │ ├── liveqa.png │ ├── log-example.png │ ├── loki.png │ ├── lokitut.png │ ├── signatures.png │ ├── tracee-cache.png │ ├── tracee-grafana-dashboard.png │ ├── tracee-performance.png │ ├── tracee-pipeline-overview.png │ ├── tracee.png │ ├── tracee_logo_only.png │ ├── tracee_video_thumbnail.png │ └── traceepolicies.png ├── index.md ├── man │ ├── __kernel_write.1 │ ├── anti_debugging.1 │ ├── aslr_inspection.1 │ ├── bpf_attach.1 │ ├── call_usermodehelper.1 │ ├── cap_capable.1 │ ├── capabilities.1 │ ├── capture.1 │ ├── cgroup_attach_task.1 │ ├── cgroup_mkdir.1 │ ├── cgroup_notify_on_release_modification.1 │ ├── cgroup_release_agent_modification.1 │ ├── cgroup_rmdir.1 │ ├── chmod_common.1 │ ├── commit_creds.1 │ ├── config.1 │ ├── container_create.1 │ ├── container_remove.1 │ ├── containers.1 │ ├── core_pattern_modification.1 │ ├── debugfs_create_dir.1 │ ├── debugfs_create_file.1 │ ├── default_loader_modification.1 │ ├── device_add.1 │ ├── dirty_pipe_splice.1 │ ├── disk_mount.1 │ ├── do_exit.1 │ ├── do_init_module.1 │ ├── do_mmap.1 │ ├── do_sigaction.1 │ ├── do_truncate.1 │ ├── docker_abuse.1 │ ├── dropped_executable.1 │ ├── dynamic_code_loading.1 │ ├── events.1 │ ├── existing_container.1 │ ├── file_modification.1 │ ├── fileless_execution.1 │ ├── ftrace_hook.1 │ ├── hidden_file_created.1 │ ├── hidden_kernel_module.1 │ ├── hooked_seq_ops.1 │ ├── hooked_syscall.1 │ ├── illegitimate_shell.1 │ ├── init_namespaces.1 │ ├── inotify_watch.1 │ ├── kallsyms_lookup_name.1 │ ├── kernel_module_loading.1 │ ├── kprobe_attach.1 │ ├── kubernetes_api_connection.1 │ ├── kubernetes_certificate_theft_attempt.1 │ ├── ld_preload.1 │ ├── load_elf_phdrs.1 │ ├── log.1 │ ├── magic_write.1 │ ├── mem_prot_alert.1 │ ├── net_flow_tcp_begin.1 │ ├── net_flow_tcp_end.1 │ ├── net_packet_dns.1 │ ├── net_packet_dns_request.1 │ ├── net_packet_dns_response.1 │ ├── net_packet_http.1 │ ├── net_packet_http_request.1 │ ├── net_packet_http_response.1 │ ├── net_packet_icmp.1 │ ├── net_packet_icmpv6.1 │ ├── net_packet_ipv4.1 │ ├── net_packet_ipv6.1 │ ├── net_packet_tcp.1 │ ├── net_packet_udp.1 │ ├── net_tcp_connect.1 │ ├── output.1 │ ├── print_mem_dump.1 │ ├── proc_create.1 │ ├── proc_fops_hooking.1 │ ├── proc_kcore_read.1 │ ├── proc_mem_access.1 │ ├── proc_mem_code_injection.1 │ ├── process_execute_failed.1 │ ├── process_vm_write_code_injection.1 │ ├── ptrace_code_injection.1 │ ├── rcd_modification.1 │ ├── register_chrdev.1 │ ├── sched_debug_recon.1 │ ├── sched_process_exec.1 │ ├── sched_process_exit.1 │ ├── sched_process_fork.1 │ ├── sched_switch.1 │ ├── scheduled_task_modification.1 │ ├── scope.1 │ ├── security_bpf.1 │ ├── security_bpf_map.1 │ ├── security_bpf_prog.1 │ ├── security_bprm_check.1 │ ├── security_file_mprotect.1 │ ├── security_file_open.1 │ ├── security_inode_mknod.1 │ ├── security_inode_rename.1 │ ├── security_inode_unlink.1 │ ├── security_kernel_post_read_file.1 │ ├── security_kernel_read_file.1 │ ├── security_mmap_file.1 │ ├── security_path_notify.1 │ ├── security_sb_mount.1 │ ├── security_sb_umount.1 │ ├── security_settime64.1 │ ├── security_socket_accept.1 │ ├── security_socket_bind.1 │ ├── security_socket_connect.1 │ ├── security_socket_create.1 │ ├── security_socket_listen.1 │ ├── security_socket_setsockopt.1 │ ├── security_task_setrlimit.1 │ ├── server.1 │ ├── set_fs_pwd.1 │ ├── shared_object_loaded.1 │ ├── socket_accept.1 │ ├── socket_dup.1 │ ├── stack_pivot.1 │ ├── stdio_over_socket.1 │ ├── sudoers_modification.1 │ ├── suspicious_syscall_source.1 │ ├── switch_task_ns.1 │ ├── symbols_collision.1 │ ├── symbols_loaded.1 │ ├── sys_enter.1 │ ├── sys_exit.1 │ ├── syscall_table_hooking.1 │ ├── system_request_key_config_modification.1 │ ├── task_rename.1 │ ├── tracee_info.1 │ ├── vfs_read.1 │ ├── vfs_readv.1 │ ├── vfs_utimes.1 │ ├── vfs_write.1 │ └── vfs_writev.1 ├── traceectl │ ├── commands │ │ ├── event.md │ │ ├── metrics.md │ │ ├── stream.md │ │ └── version.md │ ├── flags │ │ ├── format.md │ │ ├── output.md │ │ ├── policy.md │ │ └── server.md │ ├── index.md │ └── usage.md └── tutorials │ ├── additional-resources.md │ ├── deploy-grafana-dashboard.md │ ├── k8s-policies.md │ ├── overview.md │ ├── promtail.md │ ├── tracee-vagrant.md │ └── verify-tracee-signature.md ├── embedded-ebpf.go ├── embedded-lsmsupport.go ├── embedded-man.go ├── examples ├── config │ ├── global_config.json │ └── global_config.yaml └── policies │ ├── json │ ├── container_dns_events.json │ ├── context_comm.json │ ├── dig.json │ ├── extend-default-policy.json │ ├── new_containers.json │ ├── new_pids.json │ ├── not_containers.json │ ├── openat_data_pahtname.json │ ├── pid_equal.json │ ├── scope_comm.json │ ├── signature_events.json │ └── uid_higher_than_or_equal_to_zero.json │ └── yaml │ ├── container_dns_events.yaml │ ├── context_comm.yaml │ ├── dig.yaml │ ├── extend-default-policy.yaml │ ├── new_containers.yaml │ ├── new_pids.yaml │ ├── not_containers.yaml │ ├── openat_data_pahtname.yaml │ ├── pid_equal.yaml │ ├── scope_comm.yaml │ ├── signature_events.yaml │ └── uid_higher_than_or_equal_to_zero.yaml ├── go.mod ├── go.sum ├── mkdocs.yml ├── performance ├── benchmark │ ├── common │ │ ├── bench.yaml │ │ └── tracee.yaml │ └── network │ │ ├── bench.sh │ │ └── manifests │ │ ├── crd.yaml │ │ ├── loadgenerator.yaml │ │ └── microservices.yaml └── dashboard │ ├── docker-compose.yml │ ├── prometheus.yml │ └── provisioning │ ├── .gitkeep │ ├── dashboards │ ├── .gitkeep │ ├── dashboards.yml │ └── tracee.json │ ├── datasources │ ├── .gitkeep │ └── prometheus.yml │ ├── notifiers │ └── .gitkeep │ └── plugins │ └── .gitkeep ├── pkg ├── analyze │ └── analyze.go ├── bufferdecoder │ ├── decoder.go │ ├── decoder_test.go │ ├── eventsreader.go │ ├── eventsreader_bench_test.go │ ├── eventsreader_test.go │ ├── protocol.go │ └── protocol_test.go ├── cmd │ ├── cobra │ │ ├── cobra.go │ │ └── helper.go │ ├── flags │ │ ├── capabilities.go │ │ ├── capture.go │ │ ├── capture_test.go │ │ ├── config.go │ │ ├── config_test.go │ │ ├── containers.go │ │ ├── containers_test.go │ │ ├── dnscache.go │ │ ├── errors.go │ │ ├── event.go │ │ ├── event_test.go │ │ ├── flags.go │ │ ├── flags_test.go │ │ ├── logger.go │ │ ├── logger_test.go │ │ ├── output.go │ │ ├── output_test.go │ │ ├── policy.go │ │ ├── policy_test.go │ │ ├── proctree.go │ │ ├── scope.go │ │ ├── scope_test.go │ │ └── server │ │ │ ├── server.go │ │ │ └── server_test.go │ ├── initialize │ │ ├── bpfobject.go │ │ ├── callbacks.go │ │ ├── callbacks_test.go │ │ ├── kernelconfig.go │ │ └── sigs │ │ │ ├── sigs.go │ │ │ └── sigs_test.go │ ├── list.go │ ├── printer │ │ ├── broadcast.go │ │ ├── printer.go │ │ └── printer_test.go │ └── tracee.go ├── config │ └── config.go ├── datastores │ ├── container │ │ ├── containers.go │ │ ├── containers_symbols_loader.go │ │ ├── containers_test.go │ │ ├── datasource.go │ │ ├── path_resolver.go │ │ ├── path_resolver_test.go │ │ └── runtime │ │ │ ├── containerd.go │ │ │ ├── crio.go │ │ │ ├── docker.go │ │ │ ├── runtime.go │ │ │ ├── service.go │ │ │ └── sockets.go │ ├── dns │ │ ├── datasource.go │ │ ├── dns_events_test.gz │ │ ├── dnscache.go │ │ ├── dnscache_test.go │ │ ├── node.go │ │ └── query.go │ ├── process │ │ ├── datasource.go │ │ ├── fileinfo.go │ │ ├── fileinfo_test.go │ │ ├── process.go │ │ ├── process_test.go │ │ ├── proctree.go │ │ ├── proctree_bench_test.go │ │ ├── proctree_feed.go │ │ ├── proctree_feed_test.go │ │ ├── proctree_output.go │ │ ├── proctree_procfs.go │ │ ├── proctree_test.go │ │ ├── taskid.go │ │ ├── taskinfo.go │ │ ├── taskinfo_test.go │ │ ├── thread.go │ │ └── thread_test.go │ └── symbol │ │ ├── kernel.go │ │ ├── kernel_test.go │ │ ├── table.go │ │ └── table_test.go ├── ebpf │ ├── bpf_log.go │ ├── c │ │ ├── capture_filtering.h │ │ ├── common │ │ │ ├── arch.h │ │ │ ├── arguments.h │ │ │ ├── binprm.h │ │ │ ├── bpf_prog.h │ │ │ ├── buffer.h │ │ │ ├── capabilities.h │ │ │ ├── cgroups.h │ │ │ ├── common.h │ │ │ ├── consts.h │ │ │ ├── context.h │ │ │ ├── filesystem.h │ │ │ ├── filtering.h │ │ │ ├── hash.h │ │ │ ├── kconfig.h │ │ │ ├── ksymbols.h │ │ │ ├── logging.h │ │ │ ├── memory.h │ │ │ ├── namespaces.h │ │ │ ├── network.h │ │ │ ├── probes.h │ │ │ ├── signal.h │ │ │ └── task.h │ │ ├── lsmsupport │ │ │ ├── kprobe_check.bpf.c │ │ │ ├── lsm_check.bpf.c │ │ │ └── lsm_check_common.h │ │ ├── maps.h │ │ ├── tracee.bpf.c │ │ ├── tracee.h │ │ ├── types.h │ │ ├── vmlinux.h │ │ ├── vmlinux_flavors.h │ │ └── vmlinux_missing.h │ ├── capture.go │ ├── config.go │ ├── controlplane │ │ ├── cgroups.go │ │ ├── controller.go │ │ ├── controlplane_test.go │ │ ├── processes.go │ │ ├── processes_bench_test.go │ │ └── signal.go │ ├── event_parameters.go │ ├── events_enrich.go │ ├── events_pipeline.go │ ├── events_pipeline_bench_test.go │ ├── extension.go │ ├── extension_test.go │ ├── heartbeat │ │ └── heartbeat.go │ ├── hidden_kernel_module.go │ ├── hooked_syscall_table.go │ ├── initialization │ │ └── kconfig.go │ ├── ksymbols.go │ ├── lsmsupport │ │ ├── loader.go │ │ ├── loader_stub.go │ │ └── lsm_support.go │ ├── net_capture.go │ ├── probes │ │ ├── arch_amd64.go │ │ ├── arch_arm64.go │ │ ├── cgroup.go │ │ ├── common.go │ │ ├── compatibility.go │ │ ├── compatibility_test.go │ │ ├── lsm.go │ │ ├── probe_group.go │ │ ├── probes.go │ │ ├── trace.go │ │ ├── uprobe.go │ │ └── uprobe_events.go │ ├── processor.go │ ├── processor_dns.go │ ├── processor_funcs.go │ ├── processor_proctree.go │ ├── processor_proctree_bench_test.go │ ├── signature_engine.go │ ├── tracee.go │ └── triggers.go ├── events │ ├── conversion.go │ ├── conversion_legacy.go │ ├── conversion_legacy_test.go │ ├── conversion_test.go │ ├── core.go │ ├── core_amd64.go │ ├── core_arm64.go │ ├── core_test.go │ ├── data │ │ └── decode.go │ ├── definition.go │ ├── definition_datafield.go │ ├── definition_dependencies.go │ ├── definition_dependencies_core.go │ ├── definition_group.go │ ├── definition_group_test.go │ ├── definition_test.go │ ├── dependencies │ │ ├── actions.go │ │ ├── errors.go │ │ ├── event.go │ │ ├── manager.go │ │ ├── manager_events.go │ │ ├── manager_probes.go │ │ ├── manager_tailcalls.go │ │ ├── manager_test.go │ │ ├── probes.go │ │ └── tailcalls.go │ ├── derive │ │ ├── container_create.go │ │ ├── container_remove.go │ │ ├── derive.go │ │ ├── derive_test.go │ │ ├── errors.go │ │ ├── hidden_kernel_module.go │ │ ├── hooked_seq_ops.go │ │ ├── hooked_seq_ops_test.go │ │ ├── hooked_syscall.go │ │ ├── hooked_syscall_test.go │ │ ├── net_flow.go │ │ ├── net_packet.go │ │ ├── net_packet_helpers.go │ │ ├── net_tcp.go │ │ ├── net_tcp_test.go │ │ ├── process_execute_failed.go │ │ ├── process_execute_failed_test.go │ │ ├── symbols_collision.go │ │ ├── symbols_collision_test.go │ │ ├── symbols_loaded.go │ │ └── symbols_loaded_test.go │ ├── event_id_translation.go │ ├── event_id_translation_test.go │ ├── findings │ │ ├── findings.go │ │ └── findings_test.go │ ├── ftrace.go │ ├── ftrace_test.go │ ├── parse │ │ ├── params.go │ │ ├── params_bench_test.go │ │ └── params_test.go │ ├── parse_args.go │ ├── parse_args_bench_test.go │ ├── parse_args_helpers.go │ ├── parse_args_helpers_test.go │ ├── parse_args_nonext.go │ ├── parse_args_test.go │ ├── pipeline_event.go │ ├── sorting │ │ ├── cpu_queue.go │ │ ├── pool.go │ │ ├── queue.go │ │ ├── sorting.go │ │ └── sorting_test.go │ ├── trigger │ │ ├── context.go │ │ └── context_test.go │ ├── usermode.go │ └── version.go ├── filters │ ├── benchmarks │ │ └── string_test.go │ ├── binary.go │ ├── bool.go │ ├── bool_test.go │ ├── data.go │ ├── data_test.go │ ├── errors.go │ ├── filters.go │ ├── numeric.go │ ├── numeric_test.go │ ├── processtree.go │ ├── processtree_test.go │ ├── scope.go │ ├── scope_test.go │ ├── sets │ │ ├── prefixset.go │ │ ├── sets_test.go │ │ └── suffixset.go │ ├── string.go │ └── string_test.go ├── k8s │ ├── apis │ │ └── tracee.aquasec.com │ │ │ └── v1beta1 │ │ │ ├── groupversion_info.go │ │ │ ├── tracee_types.go │ │ │ └── zz_generated.deepcopy.go │ ├── controller │ │ └── controller.go │ ├── k8s.go │ └── policy.go ├── metrics │ ├── channels.go │ ├── collector.go │ ├── event_collector.go │ ├── stats.go │ └── stats_test.go ├── pcaps │ ├── cache.go │ ├── common.go │ ├── interface.go │ ├── pcap.go │ └── pcaps.go ├── policy │ ├── ebpf.go │ ├── equality.go │ ├── equality_data.go │ ├── errors.go │ ├── event_flags.go │ ├── event_flags_test.go │ ├── policies.go │ ├── policies_compute.go │ ├── policies_iterator.go │ ├── policies_test.go │ ├── policy.go │ ├── policy_manager.go │ ├── policy_manager_test.go │ ├── policy_test.go │ ├── snapshots.go │ ├── snapshots_test.go │ └── v1beta1 │ │ ├── policy_file.go │ │ └── policy_file_test.go ├── server │ ├── grpc │ │ ├── datasource.go │ │ ├── diagnostic.go │ │ ├── event_data.go │ │ ├── event_data_test.go │ │ ├── server.go │ │ ├── server_test.go │ │ └── tracee.go │ └── http │ │ ├── server.go │ │ └── server_test.go ├── signatures │ ├── benchmark │ │ ├── Makefile │ │ ├── benchmark_test.go │ │ ├── helpers_test.go │ │ └── signature │ │ │ └── golang │ │ │ ├── anti_debugging.go │ │ │ ├── code_injection.go │ │ │ └── noop.go │ ├── engine │ │ ├── engine.go │ │ └── engine_test.go │ ├── metrics │ │ └── stats.go │ └── signature │ │ ├── fake_signature.go │ │ └── signature.go ├── streams │ ├── streams.go │ └── streams_test.go └── version │ └── version.go ├── scripts ├── btfhub.sh ├── checkpatch.sh ├── disable-unattended-upgrades.sh ├── installation │ ├── install-clang.sh │ ├── install-deps-alpine.sh │ └── install-deps-ubuntu.sh ├── lib.sh ├── lib_git.sh ├── lib_internal.sh ├── lib_log.sh ├── lib_misc.sh ├── lib_print.sh ├── lib_test.sh ├── lib_testing.sh ├── run_test_scripts.sh ├── sync_system_time.sh ├── tracee_common.sh ├── tracee_start.sh ├── tracee_stop.sh └── verify_man_md_sync.sh ├── signatures ├── golang │ ├── anti_debugging_ptraceme.go │ ├── anti_debugging_ptraceme_test.go │ ├── aslr_inspection.go │ ├── aslr_inspection_test.go │ ├── cgroup_notify_on_release_modification.go │ ├── cgroup_notify_on_release_modification_test.go │ ├── cgroup_release_agent_modification.go │ ├── cgroup_release_agent_modification_test.go │ ├── core_pattern_modification.go │ ├── core_pattern_modification_test.go │ ├── default_loader_modification.go │ ├── default_loader_modification_test.go │ ├── disk_mount.go │ ├── disk_mount_test.go │ ├── docker_abuse.go │ ├── docker_abuse_test.go │ ├── dropped_executable.go │ ├── dropped_executable_test.go │ ├── dynamic_code_loading.go │ ├── dynamic_code_loading_test.go │ ├── examples │ │ └── example.go │ ├── export.go │ ├── fileless_execution.go │ ├── fileless_execution_test.go │ ├── hidden_file_created.go │ ├── hidden_file_created_test.go │ ├── illegitimate_shell.go │ ├── illegitimate_shell_test.go │ ├── k8s_service_account_token.go │ ├── k8s_service_account_token_test.go │ ├── kernel_module_loading.go │ ├── kernel_module_loading_test.go │ ├── kubernetes_api_connection.go │ ├── kubernetes_api_connection_test.go │ ├── kubernetes_certificate_theft_attempt.go │ ├── kubernetes_certificate_theft_attempt_test.go │ ├── ld_preload.go │ ├── ld_preload_test.go │ ├── proc_fops_hooking.go │ ├── proc_fops_hooking_test.go │ ├── proc_kcore_read.go │ ├── proc_kcore_read_test.go │ ├── proc_mem_access.go │ ├── proc_mem_access_test.go │ ├── proc_mem_code_injection.go │ ├── proc_mem_code_injection_test.go │ ├── process_vm_write_code_injection.go │ ├── process_vm_write_code_injection_test.go │ ├── ptrace_code_injection.go │ ├── ptrace_code_injection_test.go │ ├── rcd_modification.go │ ├── rcd_modification_test.go │ ├── sched_debug_recon.go │ ├── sched_debug_recon_test.go │ ├── scheduled_task_modification.go │ ├── scheduled_task_modification_test.go │ ├── stdio_over_socket.go │ ├── stdio_over_socket_test.go │ ├── sudoers_modification.go │ ├── sudoers_modification_test.go │ ├── syscall_table_hooking.go │ ├── syscall_table_hooking_test.go │ ├── system_request_key_config_modification.go │ ├── system_request_key_config_modification_test.go │ └── test_helpers.go └── signaturestest │ └── signaturestest.go ├── staticcheck.conf ├── tests ├── compatibility │ └── compatibility_test.go ├── e2e-common.sh ├── e2e-inst-signatures │ ├── datasourcetest │ │ └── write.go │ ├── e2e-bpf_attach.go │ ├── e2e-containers_data_source.go │ ├── e2e-dns_data_source.go │ ├── e2e-file_modification.go │ ├── e2e-ftrace_hook.go │ ├── e2e-hooked_syscall.go │ ├── e2e-lsm.go │ ├── e2e-process_execute_failed.go │ ├── e2e-proctree_data_source.go │ ├── e2e-sched_process_exec.go │ ├── e2e-security_inode_rename.go │ ├── e2e-security_path_notify.go │ ├── e2e-set_fs_pwd.go │ ├── e2e-signature_derivation.go │ ├── e2e-stack_pivot.go │ ├── e2e-suspicious_syscall_source.go │ ├── e2e-vfs_write.go │ ├── e2e-vfs_writev.go │ ├── e2e-writeable_data_source.go │ ├── export.go │ └── scripts │ │ ├── .gitignore │ │ ├── bpf_attach.sh │ │ ├── containers_data_source.sh │ │ ├── dns_data_source.sh │ │ ├── ds_writer │ │ ├── ds_writer.go │ │ └── wordlist.go │ │ ├── file_modification.sh │ │ ├── fsnotify_tester.c │ │ ├── ftrace_hook.sh │ │ ├── hijack │ │ ├── .gitignore │ │ ├── Makefile │ │ ├── hijack.c │ │ ├── load.sh │ │ └── unload.sh │ │ ├── hooked_syscall.sh │ │ ├── hooker │ │ ├── .gitignore │ │ ├── Makefile │ │ ├── hooker.c │ │ ├── load.sh │ │ └── unload.sh │ │ ├── lsm_test.sh │ │ ├── process_execute_failed.sh │ │ ├── proctree_data_source.sh │ │ ├── proctreetester.c │ │ ├── rename_and_exec.c │ │ ├── sched_process_exec.sh │ │ ├── security_inode_rename.sh │ │ ├── security_path_notify.sh │ │ ├── set_fs_pwd.sh │ │ ├── signature_derivation.sh │ │ ├── stack_pivot.c │ │ ├── stack_pivot.sh │ │ ├── suspicious_syscall_source.sh │ │ ├── sys_src_tester.c │ │ ├── vfs_write.sh │ │ ├── vfs_writev.sh │ │ ├── writable_data_source.sh │ │ └── writev_tester │ │ └── writev.c ├── e2e-inst-test-core.sh ├── e2e-inst-test-extended.sh.example ├── e2e-inst-test.sh ├── e2e-install-deps.sh ├── e2e-kernel-test.sh ├── e2e-net-signatures │ ├── e2e-dns.go │ ├── e2e-http.go │ ├── e2e-httprequest.go │ ├── e2e-httpresponse.go │ ├── e2e-icmp.go │ ├── e2e-icmpv6.go │ ├── e2e-ipv4.go │ ├── e2e-ipv6.go │ ├── e2e-tcp.go │ ├── e2e-udp.go │ ├── export.go │ ├── helpers.go │ └── scripts │ │ ├── dns.sh │ │ ├── http.sh │ │ ├── httprequest.sh │ │ ├── httpresponse.sh │ │ ├── icmp.sh │ │ ├── icmpv6.sh │ │ ├── ipv4.sh │ │ ├── ipv6.sh │ │ ├── setup.sh │ │ ├── tcp.sh │ │ └── udp.sh ├── e2e-net-test.sh ├── integration │ ├── capture_test.go │ ├── common_test.go │ ├── container_events_test.go │ ├── dependencies_test.go │ ├── event_filters_test.go │ ├── exec_test.go │ ├── integration_test.go │ └── syscaller │ │ └── cmd │ │ ├── syscall.go │ │ ├── syscall_test.go │ │ └── syscaller.go ├── libbpfgo.sh ├── perftests │ └── metrics_test.go ├── policies │ ├── inst │ │ ├── bpf_attach.yaml │ │ ├── containers_ds.yaml │ │ ├── dns_ds.yaml │ │ ├── file_modification.yaml │ │ ├── ftrace_hook.yaml │ │ ├── hooked_syscall.yaml │ │ ├── lsm_test.yaml │ │ ├── process_execute_failed.yaml │ │ ├── proctree_ds.yaml │ │ ├── sched_process_exec.yaml │ │ ├── security_inode_rename.yaml │ │ ├── security_path_notify.yaml │ │ ├── setfspwd.yaml │ │ ├── stack_pivot.yaml │ │ ├── suspicious_syscall_source.yaml │ │ ├── vfs_write.yaml │ │ └── writable_ds.yaml │ ├── kernel │ │ └── kernel.yaml │ └── net │ │ ├── dns.yaml │ │ ├── http.yaml │ │ ├── icmp.yaml │ │ ├── ip.yaml │ │ ├── tcp.yaml │ │ └── udp.yaml └── testutils │ ├── cpu.go │ ├── errors.go │ ├── exec.go │ ├── logger.go │ ├── policies.go │ ├── tracee_cmd.go │ └── tracee_integrated.go └── types ├── datasource └── proctree.go ├── detect ├── detect.go ├── detect_test.go └── finding.go ├── go.mod ├── go.sum ├── protocol ├── protocol.go └── protocol_test.go └── trace ├── network_trace.go ├── network_trace_test.go ├── trace.go └── trace_test.go /.clang-format: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.clang-format -------------------------------------------------------------------------------- /.clang-tidy: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.clang-tidy -------------------------------------------------------------------------------- /.cursor/rules/shell-style-guide.mdc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.cursor/rules/shell-style-guide.mdc -------------------------------------------------------------------------------- /.cursor/rules/testing-guide.mdc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.cursor/rules/testing-guide.mdc -------------------------------------------------------------------------------- /.dockerignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.dockerignore -------------------------------------------------------------------------------- /.github/DISCUSSION_TEMPLATE/adopters.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/DISCUSSION_TEMPLATE/adopters.yml -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/BUG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/ISSUE_TEMPLATE/BUG.md -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/DOCUMENTATION.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/ISSUE_TEMPLATE/DOCUMENTATION.md -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/FEATURE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/ISSUE_TEMPLATE/FEATURE.md -------------------------------------------------------------------------------- /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /.github/actions/run-e2e-tests/action.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/actions/run-e2e-tests/action.yaml -------------------------------------------------------------------------------- /.github/copilot-instructions.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/copilot-instructions.md -------------------------------------------------------------------------------- /.github/data/kernel-test-matrix.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/data/kernel-test-matrix.json -------------------------------------------------------------------------------- /.github/dependabot.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/dependabot.yaml -------------------------------------------------------------------------------- /.github/labeler.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/labeler.yml -------------------------------------------------------------------------------- /.github/workflows/auto-author-assign.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/auto-author-assign.yml -------------------------------------------------------------------------------- /.github/workflows/codeql.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/codeql.yaml -------------------------------------------------------------------------------- /.github/workflows/fast-forward.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/fast-forward.yaml -------------------------------------------------------------------------------- /.github/workflows/labeler.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/labeler.yml -------------------------------------------------------------------------------- /.github/workflows/mkdocs-dev.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/mkdocs-dev.yaml -------------------------------------------------------------------------------- /.github/workflows/mkdocs-latest.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/mkdocs-latest.yaml -------------------------------------------------------------------------------- /.github/workflows/performance.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/performance.yaml -------------------------------------------------------------------------------- /.github/workflows/pr-ff.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/pr-ff.yaml -------------------------------------------------------------------------------- /.github/workflows/pr-sync.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/pr-sync.yaml -------------------------------------------------------------------------------- /.github/workflows/pr.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/pr.yaml -------------------------------------------------------------------------------- /.github/workflows/publish-helm.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/publish-helm.yaml -------------------------------------------------------------------------------- /.github/workflows/release-snapshot.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/release-snapshot.yaml -------------------------------------------------------------------------------- /.github/workflows/release.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/release.yaml -------------------------------------------------------------------------------- /.github/workflows/test-daily.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/test-daily.yaml -------------------------------------------------------------------------------- /.github/workflows/test-helm-chart.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.github/workflows/test-helm-chart.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.gitmodules -------------------------------------------------------------------------------- /.revive.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/.revive.toml -------------------------------------------------------------------------------- /3rdparty/.gitignore: -------------------------------------------------------------------------------- 1 | btfhub* 2 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/Makefile -------------------------------------------------------------------------------- /NOTICE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/NOTICE -------------------------------------------------------------------------------- /RELEASING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/RELEASING.md -------------------------------------------------------------------------------- /Readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/Readme.md -------------------------------------------------------------------------------- /SECURITY.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/SECURITY.md -------------------------------------------------------------------------------- /Vagrantfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/Vagrantfile -------------------------------------------------------------------------------- /api/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/go.mod -------------------------------------------------------------------------------- /api/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/go.sum -------------------------------------------------------------------------------- /api/v1beta1/datasource.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/datasource.pb.go -------------------------------------------------------------------------------- /api/v1beta1/datasource.pb.json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/datasource.pb.json.go -------------------------------------------------------------------------------- /api/v1beta1/datasource.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/datasource.proto -------------------------------------------------------------------------------- /api/v1beta1/datasource_grpc.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/datasource_grpc.pb.go -------------------------------------------------------------------------------- /api/v1beta1/definition.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/definition.pb.go -------------------------------------------------------------------------------- /api/v1beta1/definition.pb.json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/definition.pb.json.go -------------------------------------------------------------------------------- /api/v1beta1/definition.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/definition.proto -------------------------------------------------------------------------------- /api/v1beta1/diagnostic.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/diagnostic.pb.go -------------------------------------------------------------------------------- /api/v1beta1/diagnostic.pb.json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/diagnostic.pb.json.go -------------------------------------------------------------------------------- /api/v1beta1/diagnostic.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/diagnostic.proto -------------------------------------------------------------------------------- /api/v1beta1/diagnostic_grpc.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/diagnostic_grpc.pb.go -------------------------------------------------------------------------------- /api/v1beta1/event.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/event.pb.go -------------------------------------------------------------------------------- /api/v1beta1/event.pb.json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/event.pb.json.go -------------------------------------------------------------------------------- /api/v1beta1/event.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/event.proto -------------------------------------------------------------------------------- /api/v1beta1/event_data.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/event_data.pb.go -------------------------------------------------------------------------------- /api/v1beta1/event_data.pb.json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/event_data.pb.json.go -------------------------------------------------------------------------------- /api/v1beta1/event_data.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/event_data.proto -------------------------------------------------------------------------------- /api/v1beta1/threat.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/threat.pb.go -------------------------------------------------------------------------------- /api/v1beta1/threat.pb.json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/threat.pb.json.go -------------------------------------------------------------------------------- /api/v1beta1/threat.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/threat.proto -------------------------------------------------------------------------------- /api/v1beta1/tracee.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/tracee.pb.go -------------------------------------------------------------------------------- /api/v1beta1/tracee.pb.json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/tracee.pb.json.go -------------------------------------------------------------------------------- /api/v1beta1/tracee.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/tracee.proto -------------------------------------------------------------------------------- /api/v1beta1/tracee_grpc.pb.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/api/v1beta1/tracee_grpc.pb.go -------------------------------------------------------------------------------- /brand/readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/brand/readme.md -------------------------------------------------------------------------------- /cmd/evt/cmd/helpers/helpers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/evt/cmd/helpers/helpers.go -------------------------------------------------------------------------------- /cmd/evt/cmd/root.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/evt/cmd/root.go -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/cobra.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/evt/cmd/trigger/cobra.go -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/trigger.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/evt/cmd/trigger/trigger.go -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/arch_prctl.sh: -------------------------------------------------------------------------------- 1 | common/true.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/bpf_attach.sh: -------------------------------------------------------------------------------- 1 | common/bpftrace.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/commit_creds.sh: -------------------------------------------------------------------------------- 1 | common/sudo.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/debugfs_create_dir.sh: -------------------------------------------------------------------------------- 1 | common/unshare-mkdir.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/debugfs_create_file.sh: -------------------------------------------------------------------------------- 1 | common/unshare-mkdir.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/device_add.sh: -------------------------------------------------------------------------------- 1 | common/unshare-mkdir.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/do_truncate.sh: -------------------------------------------------------------------------------- 1 | common/self-comm.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/kallsyms_lookup_name.sh: -------------------------------------------------------------------------------- 1 | common/bpftrace.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/kprobe_attach.sh: -------------------------------------------------------------------------------- 1 | common/bpftrace.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/magic_write.sh: -------------------------------------------------------------------------------- 1 | common/self-comm.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/process_execute_failed.sh: -------------------------------------------------------------------------------- 1 | common/timeout-nc.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/ptrace.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/evt/cmd/trigger/triggers/ptrace.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/sched_process_exec.sh: -------------------------------------------------------------------------------- 1 | common/true.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/sched_process_exit.sh: -------------------------------------------------------------------------------- 1 | common/true.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/sched_process_fork.sh: -------------------------------------------------------------------------------- 1 | common/timeout-nc.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/security_file_open.sh: -------------------------------------------------------------------------------- 1 | common/true.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/security_inode_symlink.sh: -------------------------------------------------------------------------------- 1 | common/mktemp-ln-rm.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/security_inode_unlink.sh: -------------------------------------------------------------------------------- 1 | common/mktemp-ln-rm.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/security_sb_mount.sh: -------------------------------------------------------------------------------- 1 | common/unshare-mkdir.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/security_socket_bind.sh: -------------------------------------------------------------------------------- 1 | common/timeout-nc.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/security_socket_connect.sh: -------------------------------------------------------------------------------- 1 | common/ping.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/security_socket_create.sh: -------------------------------------------------------------------------------- 1 | common/ping.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/shared_object_loaded.sh: -------------------------------------------------------------------------------- 1 | common/true.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/socked_dup.sh: -------------------------------------------------------------------------------- 1 | common/sudo.sh -------------------------------------------------------------------------------- /cmd/evt/cmd/trigger/triggers/switch_task_ns.sh: -------------------------------------------------------------------------------- 1 | common/unshare-mkdir.sh -------------------------------------------------------------------------------- /cmd/evt/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/evt/main.go -------------------------------------------------------------------------------- /cmd/lsm_support_check/lsm_check.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/lsm_support_check/lsm_check.go -------------------------------------------------------------------------------- /cmd/tracee-bench/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee-bench/main.go -------------------------------------------------------------------------------- /cmd/tracee-bench/main_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee-bench/main_test.go -------------------------------------------------------------------------------- /cmd/tracee-bench/prometheus.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee-bench/prometheus.sh -------------------------------------------------------------------------------- /cmd/tracee-bench/prometheus.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee-bench/prometheus.yml -------------------------------------------------------------------------------- /cmd/tracee-bench/readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee-bench/readme.md -------------------------------------------------------------------------------- /cmd/tracee-operator/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee-operator/main.go -------------------------------------------------------------------------------- /cmd/tracee/cmd/analyze.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee/cmd/analyze.go -------------------------------------------------------------------------------- /cmd/tracee/cmd/list.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee/cmd/list.go -------------------------------------------------------------------------------- /cmd/tracee/cmd/man.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee/cmd/man.go -------------------------------------------------------------------------------- /cmd/tracee/cmd/man_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee/cmd/man_test.go -------------------------------------------------------------------------------- /cmd/tracee/cmd/root.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee/cmd/root.go -------------------------------------------------------------------------------- /cmd/tracee/cmd/version.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee/cmd/version.go -------------------------------------------------------------------------------- /cmd/tracee/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/tracee/main.go -------------------------------------------------------------------------------- /cmd/traceectl/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/Makefile -------------------------------------------------------------------------------- /cmd/traceectl/cmd/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/cmd/event.go -------------------------------------------------------------------------------- /cmd/traceectl/cmd/metrics.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/cmd/metrics.go -------------------------------------------------------------------------------- /cmd/traceectl/cmd/root.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/cmd/root.go -------------------------------------------------------------------------------- /cmd/traceectl/cmd/stream.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/cmd/stream.go -------------------------------------------------------------------------------- /cmd/traceectl/cmd/version.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/cmd/version.go -------------------------------------------------------------------------------- /cmd/traceectl/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/go.mod -------------------------------------------------------------------------------- /cmd/traceectl/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/go.sum -------------------------------------------------------------------------------- /cmd/traceectl/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/main.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/client/client.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/client/client.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/client/diagnostic.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/client/diagnostic.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/client/service.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/client/service.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/cobra/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/cobra/event.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/cobra/metrics.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/cobra/metrics.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/cobra/stream.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/cobra/stream.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/cobra/version.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/cobra/version.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/event.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/flags/format.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/flags/format.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/flags/output.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/flags/output.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/flags/server.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/flags/server.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/metrics.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/metrics.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/printer/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/printer/event.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/printer/printer.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/printer/printer.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/stream.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/stream.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/cmd/version.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/cmd/version.go -------------------------------------------------------------------------------- /cmd/traceectl/pkg/config/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/pkg/config/config.go -------------------------------------------------------------------------------- /cmd/traceectl/test/server.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/cmd/traceectl/test/server.go -------------------------------------------------------------------------------- /codecov.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/codecov.yml -------------------------------------------------------------------------------- /common/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/README.md -------------------------------------------------------------------------------- /common/bitwise/bitwise.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/bitwise/bitwise.go -------------------------------------------------------------------------------- /common/bitwise/bitwise_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/bitwise/bitwise_test.go -------------------------------------------------------------------------------- /common/bucketcache/bucketcache.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/bucketcache/bucketcache.go -------------------------------------------------------------------------------- /common/bucketcache/bucketcache_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/bucketcache/bucketcache_test.go -------------------------------------------------------------------------------- /common/capabilities/capabilities.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/capabilities/capabilities.go -------------------------------------------------------------------------------- /common/capabilities/capabilities_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/capabilities/capabilities_test.go -------------------------------------------------------------------------------- /common/cgroup/cgroup.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/cgroup/cgroup.go -------------------------------------------------------------------------------- /common/cgroup/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/cgroup/errors.go -------------------------------------------------------------------------------- /common/changelog/changelog.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/changelog/changelog.go -------------------------------------------------------------------------------- /common/changelog/changelog_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/changelog/changelog_test.go -------------------------------------------------------------------------------- /common/changelog/entry.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/changelog/entry.go -------------------------------------------------------------------------------- /common/counter/counter.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/counter/counter.go -------------------------------------------------------------------------------- /common/counter/counter_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/counter/counter_bench_test.go -------------------------------------------------------------------------------- /common/counter/counter_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/counter/counter_test.go -------------------------------------------------------------------------------- /common/digest/cache.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/digest/cache.go -------------------------------------------------------------------------------- /common/digest/hash.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/digest/hash.go -------------------------------------------------------------------------------- /common/digest/hash_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/digest/hash_bench_test.go -------------------------------------------------------------------------------- /common/digest/hash_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/digest/hash_test.go -------------------------------------------------------------------------------- /common/digest/key.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/digest/key.go -------------------------------------------------------------------------------- /common/elf/analyzer.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/elf/analyzer.go -------------------------------------------------------------------------------- /common/elf/analyzer_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/elf/analyzer_test.go -------------------------------------------------------------------------------- /common/elf/go.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/elf/go.go -------------------------------------------------------------------------------- /common/elf/go_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/elf/go_test.go -------------------------------------------------------------------------------- /common/elf/symbols.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/elf/symbols.go -------------------------------------------------------------------------------- /common/elf/symbols_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/elf/symbols_test.go -------------------------------------------------------------------------------- /common/environment/amount_cpus.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/amount_cpus.go -------------------------------------------------------------------------------- /common/environment/amount_mem.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/amount_mem.go -------------------------------------------------------------------------------- /common/environment/amount_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/amount_test.go -------------------------------------------------------------------------------- /common/environment/kernel_config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/kernel_config.go -------------------------------------------------------------------------------- /common/environment/kernel_config_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/kernel_config_test.go -------------------------------------------------------------------------------- /common/environment/kernel_version.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/kernel_version.go -------------------------------------------------------------------------------- /common/environment/kernel_version_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/kernel_version_test.go -------------------------------------------------------------------------------- /common/environment/lsm.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/lsm.go -------------------------------------------------------------------------------- /common/environment/lsm_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/lsm_test.go -------------------------------------------------------------------------------- /common/environment/osinfo.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/osinfo.go -------------------------------------------------------------------------------- /common/environment/osinfo_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/environment/osinfo_test.go -------------------------------------------------------------------------------- /common/errfmt/errfmt.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/errfmt/errfmt.go -------------------------------------------------------------------------------- /common/errfmt/errfmt_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/errfmt/errfmt_test.go -------------------------------------------------------------------------------- /common/fileutil/fileutil.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/fileutil/fileutil.go -------------------------------------------------------------------------------- /common/fileutil/fileutil_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/fileutil/fileutil_test.go -------------------------------------------------------------------------------- /common/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/go.mod -------------------------------------------------------------------------------- /common/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/go.sum -------------------------------------------------------------------------------- /common/interfaces/interfaces.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/interfaces/interfaces.go -------------------------------------------------------------------------------- /common/logger/callerinfo.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/logger/callerinfo.go -------------------------------------------------------------------------------- /common/logger/callerinfo_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/logger/callerinfo_test.go -------------------------------------------------------------------------------- /common/logger/filter.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/logger/filter.go -------------------------------------------------------------------------------- /common/logger/filter_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/logger/filter_test.go -------------------------------------------------------------------------------- /common/logger/logcounter.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/logger/logcounter.go -------------------------------------------------------------------------------- /common/logger/logger.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/logger/logger.go -------------------------------------------------------------------------------- /common/logger/logger_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/logger/logger_test.go -------------------------------------------------------------------------------- /common/mount/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/mount/errors.go -------------------------------------------------------------------------------- /common/mount/mount.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/mount/mount.go -------------------------------------------------------------------------------- /common/mount/mount_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/mount/mount_test.go -------------------------------------------------------------------------------- /common/murmur/murmur.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/murmur/murmur.go -------------------------------------------------------------------------------- /common/murmur/murmur_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/murmur/murmur_test.go -------------------------------------------------------------------------------- /common/parsers/data_parsers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/parsers/data_parsers.go -------------------------------------------------------------------------------- /common/parsers/data_parsers_amd64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/parsers/data_parsers_amd64.go -------------------------------------------------------------------------------- /common/parsers/data_parsers_arm64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/parsers/data_parsers_arm64.go -------------------------------------------------------------------------------- /common/parsers/data_parsers_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/parsers/data_parsers_bench_test.go -------------------------------------------------------------------------------- /common/parsers/data_parsers_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/parsers/data_parsers_test.go -------------------------------------------------------------------------------- /common/parsers/file_parsers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/parsers/file_parsers.go -------------------------------------------------------------------------------- /common/parsers/network_parsers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/parsers/network_parsers.go -------------------------------------------------------------------------------- /common/proc/exe.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/exe.go -------------------------------------------------------------------------------- /common/proc/formatters.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/formatters.go -------------------------------------------------------------------------------- /common/proc/ns.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/ns.go -------------------------------------------------------------------------------- /common/proc/ns_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/ns_bench_test.go -------------------------------------------------------------------------------- /common/proc/ns_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/ns_test.go -------------------------------------------------------------------------------- /common/proc/parsers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/parsers.go -------------------------------------------------------------------------------- /common/proc/readfile.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/readfile.go -------------------------------------------------------------------------------- /common/proc/readfile_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/readfile_bench_test.go -------------------------------------------------------------------------------- /common/proc/readfile_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/readfile_test.go -------------------------------------------------------------------------------- /common/proc/stat.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/stat.go -------------------------------------------------------------------------------- /common/proc/stat_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/stat_bench_test.go -------------------------------------------------------------------------------- /common/proc/stat_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/stat_test.go -------------------------------------------------------------------------------- /common/proc/status.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/status.go -------------------------------------------------------------------------------- /common/proc/status_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/status_bench_test.go -------------------------------------------------------------------------------- /common/proc/status_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/status_test.go -------------------------------------------------------------------------------- /common/proc/uptime.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/proc/uptime.go -------------------------------------------------------------------------------- /common/set/set.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/set/set.go -------------------------------------------------------------------------------- /common/set/set_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/set/set_test.go -------------------------------------------------------------------------------- /common/set/simpleset.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/set/simpleset.go -------------------------------------------------------------------------------- /common/sharedobjs/host_symbols_loader.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/sharedobjs/host_symbols_loader.go -------------------------------------------------------------------------------- /common/sharedobjs/shared_object.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/sharedobjs/shared_object.go -------------------------------------------------------------------------------- /common/stringutil/stringutil.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/stringutil/stringutil.go -------------------------------------------------------------------------------- /common/stringutil/stringutil_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/stringutil/stringutil_test.go -------------------------------------------------------------------------------- /common/system/monitor.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/system/monitor.go -------------------------------------------------------------------------------- /common/system/monitor_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/system/monitor_test.go -------------------------------------------------------------------------------- /common/tests/helpers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/tests/helpers.go -------------------------------------------------------------------------------- /common/tests/helpers_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/tests/helpers_test.go -------------------------------------------------------------------------------- /common/timeutil/time.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/timeutil/time.go -------------------------------------------------------------------------------- /common/timeutil/time_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/common/timeutil/time_test.go -------------------------------------------------------------------------------- /deploy/boilerplate.go.txt: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /deploy/generate-k8s-static.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/generate-k8s-static.yaml -------------------------------------------------------------------------------- /deploy/grafana/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/grafana/README.md -------------------------------------------------------------------------------- /deploy/grafana/tracee.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/grafana/tracee.json -------------------------------------------------------------------------------- /deploy/helm/chart_schema.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/chart_schema.yaml -------------------------------------------------------------------------------- /deploy/helm/ct.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/ct.yaml -------------------------------------------------------------------------------- /deploy/helm/lintconf.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/lintconf.yaml -------------------------------------------------------------------------------- /deploy/helm/tracee/.helmignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/tracee/.helmignore -------------------------------------------------------------------------------- /deploy/helm/tracee/Chart.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/tracee/Chart.yaml -------------------------------------------------------------------------------- /deploy/helm/tracee/templates/NOTES.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/tracee/templates/NOTES.txt -------------------------------------------------------------------------------- /deploy/helm/tracee/templates/_helpers.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/tracee/templates/_helpers.tpl -------------------------------------------------------------------------------- /deploy/helm/tracee/templates/deploy.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/tracee/templates/deploy.yaml -------------------------------------------------------------------------------- /deploy/helm/tracee/templates/role.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/tracee/templates/role.yaml -------------------------------------------------------------------------------- /deploy/helm/tracee/values.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/helm/tracee/values.yaml -------------------------------------------------------------------------------- /deploy/kubernetes/tracee/tracee.aquasec.com_policies.yaml: -------------------------------------------------------------------------------- 1 | ../../helm/tracee/crds/tracee.aquasec.com_policies.yaml -------------------------------------------------------------------------------- /deploy/kubernetes/tracee/tracee.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/deploy/kubernetes/tracee/tracee.yaml -------------------------------------------------------------------------------- /docs/contributing/adding-events.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/adding-events.md -------------------------------------------------------------------------------- /docs/contributing/building/building.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/building/building.md -------------------------------------------------------------------------------- /docs/contributing/building/containers.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/building/containers.md -------------------------------------------------------------------------------- /docs/contributing/building/environment.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/building/environment.md -------------------------------------------------------------------------------- /docs/contributing/checkpatch.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/checkpatch.md -------------------------------------------------------------------------------- /docs/contributing/guidelines.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/guidelines.md -------------------------------------------------------------------------------- /docs/contributing/kubernetes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/kubernetes.md -------------------------------------------------------------------------------- /docs/contributing/overview.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/overview.md -------------------------------------------------------------------------------- /docs/contributing/performance.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/performance.md -------------------------------------------------------------------------------- /docs/contributing/testing-coverage.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/contributing/testing-coverage.md -------------------------------------------------------------------------------- /docs/docs/advanced/data-sources/custom.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/advanced/data-sources/custom.md -------------------------------------------------------------------------------- /docs/docs/advanced/data-sources/write.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/advanced/data-sources/write.md -------------------------------------------------------------------------------- /docs/docs/advanced/forensics.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/advanced/forensics.md -------------------------------------------------------------------------------- /docs/docs/advanced/ordering-events.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/advanced/ordering-events.md -------------------------------------------------------------------------------- /docs/docs/advanced/secure-tracing.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/advanced/secure-tracing.md -------------------------------------------------------------------------------- /docs/docs/events/custom/golang.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/events/custom/golang.md -------------------------------------------------------------------------------- /docs/docs/events/custom/overview.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/events/custom/overview.md -------------------------------------------------------------------------------- /docs/docs/events/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/events/index.md -------------------------------------------------------------------------------- /docs/docs/flags/capabilities.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/capabilities.1.md -------------------------------------------------------------------------------- /docs/docs/flags/capture.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/capture.1.md -------------------------------------------------------------------------------- /docs/docs/flags/config.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/config.1.md -------------------------------------------------------------------------------- /docs/docs/flags/containers.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/containers.1.md -------------------------------------------------------------------------------- /docs/docs/flags/events.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/events.1.md -------------------------------------------------------------------------------- /docs/docs/flags/log.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/log.1.md -------------------------------------------------------------------------------- /docs/docs/flags/output.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/output.1.md -------------------------------------------------------------------------------- /docs/docs/flags/scope.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/scope.1.md -------------------------------------------------------------------------------- /docs/docs/flags/server.1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/flags/server.1.md -------------------------------------------------------------------------------- /docs/docs/install/capabilities.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/capabilities.md -------------------------------------------------------------------------------- /docs/docs/install/config/cli.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/config/cli.md -------------------------------------------------------------------------------- /docs/docs/install/config/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/config/index.md -------------------------------------------------------------------------------- /docs/docs/install/config/kubernetes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/config/kubernetes.md -------------------------------------------------------------------------------- /docs/docs/install/container-engines.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/container-engines.md -------------------------------------------------------------------------------- /docs/docs/install/docker.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/docker.md -------------------------------------------------------------------------------- /docs/docs/install/healthz.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/healthz.md -------------------------------------------------------------------------------- /docs/docs/install/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/index.md -------------------------------------------------------------------------------- /docs/docs/install/kernel-symbols.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/kernel-symbols.md -------------------------------------------------------------------------------- /docs/docs/install/kubernetes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/kubernetes.md -------------------------------------------------------------------------------- /docs/docs/install/lsm-support.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/lsm-support.md -------------------------------------------------------------------------------- /docs/docs/install/mac-faq.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/mac-faq.md -------------------------------------------------------------------------------- /docs/docs/install/os-requirements.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/os-requirements.md -------------------------------------------------------------------------------- /docs/docs/install/prerequisites.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/prerequisites.md -------------------------------------------------------------------------------- /docs/docs/install/prometheus.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/install/prometheus.md -------------------------------------------------------------------------------- /docs/docs/outputs/event-structure.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/outputs/event-structure.md -------------------------------------------------------------------------------- /docs/docs/outputs/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/outputs/index.md -------------------------------------------------------------------------------- /docs/docs/outputs/logging.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/outputs/logging.md -------------------------------------------------------------------------------- /docs/docs/outputs/output-formats.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/outputs/output-formats.md -------------------------------------------------------------------------------- /docs/docs/outputs/output-options.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/outputs/output-options.md -------------------------------------------------------------------------------- /docs/docs/overview.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/overview.md -------------------------------------------------------------------------------- /docs/docs/policies/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/policies/index.md -------------------------------------------------------------------------------- /docs/docs/policies/rules.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/policies/rules.md -------------------------------------------------------------------------------- /docs/docs/policies/scopes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/policies/scopes.md -------------------------------------------------------------------------------- /docs/docs/policies/usage/cli.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/policies/usage/cli.md -------------------------------------------------------------------------------- /docs/docs/policies/usage/kubernetes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/policies/usage/kubernetes.md -------------------------------------------------------------------------------- /docs/docs/troubleshooting.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/docs/troubleshooting.md -------------------------------------------------------------------------------- /docs/images/architecture.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/architecture.png -------------------------------------------------------------------------------- /docs/images/ebpftraceehelminstall.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/ebpftraceehelminstall.png -------------------------------------------------------------------------------- /docs/images/liveqa.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/liveqa.png -------------------------------------------------------------------------------- /docs/images/log-example.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/log-example.png -------------------------------------------------------------------------------- /docs/images/loki.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/loki.png -------------------------------------------------------------------------------- /docs/images/lokitut.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/lokitut.png -------------------------------------------------------------------------------- /docs/images/signatures.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/signatures.png -------------------------------------------------------------------------------- /docs/images/tracee-cache.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/tracee-cache.png -------------------------------------------------------------------------------- /docs/images/tracee-grafana-dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/tracee-grafana-dashboard.png -------------------------------------------------------------------------------- /docs/images/tracee-performance.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/tracee-performance.png -------------------------------------------------------------------------------- /docs/images/tracee-pipeline-overview.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/tracee-pipeline-overview.png -------------------------------------------------------------------------------- /docs/images/tracee.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/tracee.png -------------------------------------------------------------------------------- /docs/images/tracee_logo_only.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/tracee_logo_only.png -------------------------------------------------------------------------------- /docs/images/tracee_video_thumbnail.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/tracee_video_thumbnail.png -------------------------------------------------------------------------------- /docs/images/traceepolicies.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/images/traceepolicies.png -------------------------------------------------------------------------------- /docs/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/index.md -------------------------------------------------------------------------------- /docs/man/__kernel_write.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/__kernel_write.1 -------------------------------------------------------------------------------- /docs/man/anti_debugging.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/anti_debugging.1 -------------------------------------------------------------------------------- /docs/man/aslr_inspection.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/aslr_inspection.1 -------------------------------------------------------------------------------- /docs/man/bpf_attach.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/bpf_attach.1 -------------------------------------------------------------------------------- /docs/man/call_usermodehelper.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/call_usermodehelper.1 -------------------------------------------------------------------------------- /docs/man/cap_capable.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/cap_capable.1 -------------------------------------------------------------------------------- /docs/man/capabilities.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/capabilities.1 -------------------------------------------------------------------------------- /docs/man/capture.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/capture.1 -------------------------------------------------------------------------------- /docs/man/cgroup_attach_task.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/cgroup_attach_task.1 -------------------------------------------------------------------------------- /docs/man/cgroup_mkdir.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/cgroup_mkdir.1 -------------------------------------------------------------------------------- /docs/man/cgroup_rmdir.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/cgroup_rmdir.1 -------------------------------------------------------------------------------- /docs/man/chmod_common.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/chmod_common.1 -------------------------------------------------------------------------------- /docs/man/commit_creds.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/commit_creds.1 -------------------------------------------------------------------------------- /docs/man/config.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/config.1 -------------------------------------------------------------------------------- /docs/man/container_create.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/container_create.1 -------------------------------------------------------------------------------- /docs/man/container_remove.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/container_remove.1 -------------------------------------------------------------------------------- /docs/man/containers.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/containers.1 -------------------------------------------------------------------------------- /docs/man/core_pattern_modification.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/core_pattern_modification.1 -------------------------------------------------------------------------------- /docs/man/debugfs_create_dir.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/debugfs_create_dir.1 -------------------------------------------------------------------------------- /docs/man/debugfs_create_file.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/debugfs_create_file.1 -------------------------------------------------------------------------------- /docs/man/default_loader_modification.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/default_loader_modification.1 -------------------------------------------------------------------------------- /docs/man/device_add.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/device_add.1 -------------------------------------------------------------------------------- /docs/man/dirty_pipe_splice.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/dirty_pipe_splice.1 -------------------------------------------------------------------------------- /docs/man/disk_mount.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/disk_mount.1 -------------------------------------------------------------------------------- /docs/man/do_exit.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/do_exit.1 -------------------------------------------------------------------------------- /docs/man/do_init_module.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/do_init_module.1 -------------------------------------------------------------------------------- /docs/man/do_mmap.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/do_mmap.1 -------------------------------------------------------------------------------- /docs/man/do_sigaction.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/do_sigaction.1 -------------------------------------------------------------------------------- /docs/man/do_truncate.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/do_truncate.1 -------------------------------------------------------------------------------- /docs/man/docker_abuse.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/docker_abuse.1 -------------------------------------------------------------------------------- /docs/man/dropped_executable.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/dropped_executable.1 -------------------------------------------------------------------------------- /docs/man/dynamic_code_loading.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/dynamic_code_loading.1 -------------------------------------------------------------------------------- /docs/man/events.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/events.1 -------------------------------------------------------------------------------- /docs/man/existing_container.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/existing_container.1 -------------------------------------------------------------------------------- /docs/man/file_modification.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/file_modification.1 -------------------------------------------------------------------------------- /docs/man/fileless_execution.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/fileless_execution.1 -------------------------------------------------------------------------------- /docs/man/ftrace_hook.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/ftrace_hook.1 -------------------------------------------------------------------------------- /docs/man/hidden_file_created.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/hidden_file_created.1 -------------------------------------------------------------------------------- /docs/man/hidden_kernel_module.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/hidden_kernel_module.1 -------------------------------------------------------------------------------- /docs/man/hooked_seq_ops.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/hooked_seq_ops.1 -------------------------------------------------------------------------------- /docs/man/hooked_syscall.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/hooked_syscall.1 -------------------------------------------------------------------------------- /docs/man/illegitimate_shell.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/illegitimate_shell.1 -------------------------------------------------------------------------------- /docs/man/init_namespaces.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/init_namespaces.1 -------------------------------------------------------------------------------- /docs/man/inotify_watch.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/inotify_watch.1 -------------------------------------------------------------------------------- /docs/man/kallsyms_lookup_name.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/kallsyms_lookup_name.1 -------------------------------------------------------------------------------- /docs/man/kernel_module_loading.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/kernel_module_loading.1 -------------------------------------------------------------------------------- /docs/man/kprobe_attach.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/kprobe_attach.1 -------------------------------------------------------------------------------- /docs/man/kubernetes_api_connection.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/kubernetes_api_connection.1 -------------------------------------------------------------------------------- /docs/man/ld_preload.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/ld_preload.1 -------------------------------------------------------------------------------- /docs/man/load_elf_phdrs.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/load_elf_phdrs.1 -------------------------------------------------------------------------------- /docs/man/log.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/log.1 -------------------------------------------------------------------------------- /docs/man/magic_write.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/magic_write.1 -------------------------------------------------------------------------------- /docs/man/mem_prot_alert.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/mem_prot_alert.1 -------------------------------------------------------------------------------- /docs/man/net_flow_tcp_begin.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_flow_tcp_begin.1 -------------------------------------------------------------------------------- /docs/man/net_flow_tcp_end.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_flow_tcp_end.1 -------------------------------------------------------------------------------- /docs/man/net_packet_dns.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_dns.1 -------------------------------------------------------------------------------- /docs/man/net_packet_dns_request.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_dns_request.1 -------------------------------------------------------------------------------- /docs/man/net_packet_dns_response.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_dns_response.1 -------------------------------------------------------------------------------- /docs/man/net_packet_http.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_http.1 -------------------------------------------------------------------------------- /docs/man/net_packet_http_request.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_http_request.1 -------------------------------------------------------------------------------- /docs/man/net_packet_http_response.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_http_response.1 -------------------------------------------------------------------------------- /docs/man/net_packet_icmp.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_icmp.1 -------------------------------------------------------------------------------- /docs/man/net_packet_icmpv6.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_icmpv6.1 -------------------------------------------------------------------------------- /docs/man/net_packet_ipv4.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_ipv4.1 -------------------------------------------------------------------------------- /docs/man/net_packet_ipv6.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_ipv6.1 -------------------------------------------------------------------------------- /docs/man/net_packet_tcp.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_tcp.1 -------------------------------------------------------------------------------- /docs/man/net_packet_udp.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_packet_udp.1 -------------------------------------------------------------------------------- /docs/man/net_tcp_connect.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/net_tcp_connect.1 -------------------------------------------------------------------------------- /docs/man/output.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/output.1 -------------------------------------------------------------------------------- /docs/man/print_mem_dump.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/print_mem_dump.1 -------------------------------------------------------------------------------- /docs/man/proc_create.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/proc_create.1 -------------------------------------------------------------------------------- /docs/man/proc_fops_hooking.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/proc_fops_hooking.1 -------------------------------------------------------------------------------- /docs/man/proc_kcore_read.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/proc_kcore_read.1 -------------------------------------------------------------------------------- /docs/man/proc_mem_access.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/proc_mem_access.1 -------------------------------------------------------------------------------- /docs/man/proc_mem_code_injection.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/proc_mem_code_injection.1 -------------------------------------------------------------------------------- /docs/man/process_execute_failed.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/process_execute_failed.1 -------------------------------------------------------------------------------- /docs/man/ptrace_code_injection.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/ptrace_code_injection.1 -------------------------------------------------------------------------------- /docs/man/rcd_modification.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/rcd_modification.1 -------------------------------------------------------------------------------- /docs/man/register_chrdev.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/register_chrdev.1 -------------------------------------------------------------------------------- /docs/man/sched_debug_recon.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sched_debug_recon.1 -------------------------------------------------------------------------------- /docs/man/sched_process_exec.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sched_process_exec.1 -------------------------------------------------------------------------------- /docs/man/sched_process_exit.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sched_process_exit.1 -------------------------------------------------------------------------------- /docs/man/sched_process_fork.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sched_process_fork.1 -------------------------------------------------------------------------------- /docs/man/sched_switch.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sched_switch.1 -------------------------------------------------------------------------------- /docs/man/scheduled_task_modification.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/scheduled_task_modification.1 -------------------------------------------------------------------------------- /docs/man/scope.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/scope.1 -------------------------------------------------------------------------------- /docs/man/security_bpf.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_bpf.1 -------------------------------------------------------------------------------- /docs/man/security_bpf_map.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_bpf_map.1 -------------------------------------------------------------------------------- /docs/man/security_bpf_prog.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_bpf_prog.1 -------------------------------------------------------------------------------- /docs/man/security_bprm_check.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_bprm_check.1 -------------------------------------------------------------------------------- /docs/man/security_file_mprotect.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_file_mprotect.1 -------------------------------------------------------------------------------- /docs/man/security_file_open.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_file_open.1 -------------------------------------------------------------------------------- /docs/man/security_inode_mknod.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_inode_mknod.1 -------------------------------------------------------------------------------- /docs/man/security_inode_rename.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_inode_rename.1 -------------------------------------------------------------------------------- /docs/man/security_inode_unlink.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_inode_unlink.1 -------------------------------------------------------------------------------- /docs/man/security_kernel_post_read_file.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_kernel_post_read_file.1 -------------------------------------------------------------------------------- /docs/man/security_kernel_read_file.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_kernel_read_file.1 -------------------------------------------------------------------------------- /docs/man/security_mmap_file.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_mmap_file.1 -------------------------------------------------------------------------------- /docs/man/security_path_notify.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_path_notify.1 -------------------------------------------------------------------------------- /docs/man/security_sb_mount.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_sb_mount.1 -------------------------------------------------------------------------------- /docs/man/security_sb_umount.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_sb_umount.1 -------------------------------------------------------------------------------- /docs/man/security_settime64.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_settime64.1 -------------------------------------------------------------------------------- /docs/man/security_socket_accept.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_socket_accept.1 -------------------------------------------------------------------------------- /docs/man/security_socket_bind.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_socket_bind.1 -------------------------------------------------------------------------------- /docs/man/security_socket_connect.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_socket_connect.1 -------------------------------------------------------------------------------- /docs/man/security_socket_create.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_socket_create.1 -------------------------------------------------------------------------------- /docs/man/security_socket_listen.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_socket_listen.1 -------------------------------------------------------------------------------- /docs/man/security_socket_setsockopt.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_socket_setsockopt.1 -------------------------------------------------------------------------------- /docs/man/security_task_setrlimit.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/security_task_setrlimit.1 -------------------------------------------------------------------------------- /docs/man/server.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/server.1 -------------------------------------------------------------------------------- /docs/man/set_fs_pwd.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/set_fs_pwd.1 -------------------------------------------------------------------------------- /docs/man/shared_object_loaded.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/shared_object_loaded.1 -------------------------------------------------------------------------------- /docs/man/socket_accept.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/socket_accept.1 -------------------------------------------------------------------------------- /docs/man/socket_dup.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/socket_dup.1 -------------------------------------------------------------------------------- /docs/man/stack_pivot.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/stack_pivot.1 -------------------------------------------------------------------------------- /docs/man/stdio_over_socket.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/stdio_over_socket.1 -------------------------------------------------------------------------------- /docs/man/sudoers_modification.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sudoers_modification.1 -------------------------------------------------------------------------------- /docs/man/suspicious_syscall_source.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/suspicious_syscall_source.1 -------------------------------------------------------------------------------- /docs/man/switch_task_ns.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/switch_task_ns.1 -------------------------------------------------------------------------------- /docs/man/symbols_collision.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/symbols_collision.1 -------------------------------------------------------------------------------- /docs/man/symbols_loaded.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/symbols_loaded.1 -------------------------------------------------------------------------------- /docs/man/sys_enter.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sys_enter.1 -------------------------------------------------------------------------------- /docs/man/sys_exit.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/sys_exit.1 -------------------------------------------------------------------------------- /docs/man/syscall_table_hooking.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/syscall_table_hooking.1 -------------------------------------------------------------------------------- /docs/man/task_rename.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/task_rename.1 -------------------------------------------------------------------------------- /docs/man/tracee_info.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/tracee_info.1 -------------------------------------------------------------------------------- /docs/man/vfs_read.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/vfs_read.1 -------------------------------------------------------------------------------- /docs/man/vfs_readv.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/vfs_readv.1 -------------------------------------------------------------------------------- /docs/man/vfs_utimes.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/vfs_utimes.1 -------------------------------------------------------------------------------- /docs/man/vfs_write.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/vfs_write.1 -------------------------------------------------------------------------------- /docs/man/vfs_writev.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/man/vfs_writev.1 -------------------------------------------------------------------------------- /docs/traceectl/commands/event.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/commands/event.md -------------------------------------------------------------------------------- /docs/traceectl/commands/metrics.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/commands/metrics.md -------------------------------------------------------------------------------- /docs/traceectl/commands/stream.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/commands/stream.md -------------------------------------------------------------------------------- /docs/traceectl/commands/version.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/commands/version.md -------------------------------------------------------------------------------- /docs/traceectl/flags/format.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/flags/format.md -------------------------------------------------------------------------------- /docs/traceectl/flags/output.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/flags/output.md -------------------------------------------------------------------------------- /docs/traceectl/flags/policy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/flags/policy.md -------------------------------------------------------------------------------- /docs/traceectl/flags/server.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/flags/server.md -------------------------------------------------------------------------------- /docs/traceectl/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/index.md -------------------------------------------------------------------------------- /docs/traceectl/usage.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/traceectl/usage.md -------------------------------------------------------------------------------- /docs/tutorials/additional-resources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/tutorials/additional-resources.md -------------------------------------------------------------------------------- /docs/tutorials/k8s-policies.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/tutorials/k8s-policies.md -------------------------------------------------------------------------------- /docs/tutorials/overview.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/tutorials/overview.md -------------------------------------------------------------------------------- /docs/tutorials/promtail.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/tutorials/promtail.md -------------------------------------------------------------------------------- /docs/tutorials/tracee-vagrant.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/tutorials/tracee-vagrant.md -------------------------------------------------------------------------------- /docs/tutorials/verify-tracee-signature.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/docs/tutorials/verify-tracee-signature.md -------------------------------------------------------------------------------- /embedded-ebpf.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/embedded-ebpf.go -------------------------------------------------------------------------------- /embedded-lsmsupport.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/embedded-lsmsupport.go -------------------------------------------------------------------------------- /embedded-man.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/embedded-man.go -------------------------------------------------------------------------------- /examples/config/global_config.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/config/global_config.json -------------------------------------------------------------------------------- /examples/config/global_config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/config/global_config.yaml -------------------------------------------------------------------------------- /examples/policies/json/context_comm.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/json/context_comm.json -------------------------------------------------------------------------------- /examples/policies/json/dig.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/json/dig.json -------------------------------------------------------------------------------- /examples/policies/json/new_pids.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/json/new_pids.json -------------------------------------------------------------------------------- /examples/policies/json/pid_equal.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/json/pid_equal.json -------------------------------------------------------------------------------- /examples/policies/json/scope_comm.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/json/scope_comm.json -------------------------------------------------------------------------------- /examples/policies/yaml/context_comm.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/yaml/context_comm.yaml -------------------------------------------------------------------------------- /examples/policies/yaml/dig.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/yaml/dig.yaml -------------------------------------------------------------------------------- /examples/policies/yaml/new_pids.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/yaml/new_pids.yaml -------------------------------------------------------------------------------- /examples/policies/yaml/pid_equal.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/yaml/pid_equal.yaml -------------------------------------------------------------------------------- /examples/policies/yaml/scope_comm.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/examples/policies/yaml/scope_comm.yaml -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/go.sum -------------------------------------------------------------------------------- /mkdocs.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/mkdocs.yml -------------------------------------------------------------------------------- /performance/benchmark/common/bench.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/performance/benchmark/common/bench.yaml -------------------------------------------------------------------------------- /performance/benchmark/common/tracee.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/performance/benchmark/common/tracee.yaml -------------------------------------------------------------------------------- /performance/benchmark/network/bench.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/performance/benchmark/network/bench.sh -------------------------------------------------------------------------------- /performance/dashboard/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/performance/dashboard/docker-compose.yml -------------------------------------------------------------------------------- /performance/dashboard/prometheus.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/performance/dashboard/prometheus.yml -------------------------------------------------------------------------------- /performance/dashboard/provisioning/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /performance/dashboard/provisioning/dashboards/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /performance/dashboard/provisioning/datasources/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /performance/dashboard/provisioning/notifiers/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /performance/dashboard/provisioning/plugins/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /pkg/analyze/analyze.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/analyze/analyze.go -------------------------------------------------------------------------------- /pkg/bufferdecoder/decoder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/bufferdecoder/decoder.go -------------------------------------------------------------------------------- /pkg/bufferdecoder/decoder_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/bufferdecoder/decoder_test.go -------------------------------------------------------------------------------- /pkg/bufferdecoder/eventsreader.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/bufferdecoder/eventsreader.go -------------------------------------------------------------------------------- /pkg/bufferdecoder/eventsreader_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/bufferdecoder/eventsreader_test.go -------------------------------------------------------------------------------- /pkg/bufferdecoder/protocol.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/bufferdecoder/protocol.go -------------------------------------------------------------------------------- /pkg/bufferdecoder/protocol_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/bufferdecoder/protocol_test.go -------------------------------------------------------------------------------- /pkg/cmd/cobra/cobra.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/cobra/cobra.go -------------------------------------------------------------------------------- /pkg/cmd/cobra/helper.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/cobra/helper.go -------------------------------------------------------------------------------- /pkg/cmd/flags/capabilities.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/capabilities.go -------------------------------------------------------------------------------- /pkg/cmd/flags/capture.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/capture.go -------------------------------------------------------------------------------- /pkg/cmd/flags/capture_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/capture_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/config.go -------------------------------------------------------------------------------- /pkg/cmd/flags/config_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/config_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/containers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/containers.go -------------------------------------------------------------------------------- /pkg/cmd/flags/containers_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/containers_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/dnscache.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/dnscache.go -------------------------------------------------------------------------------- /pkg/cmd/flags/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/errors.go -------------------------------------------------------------------------------- /pkg/cmd/flags/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/event.go -------------------------------------------------------------------------------- /pkg/cmd/flags/event_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/event_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/flags.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/flags.go -------------------------------------------------------------------------------- /pkg/cmd/flags/flags_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/flags_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/logger.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/logger.go -------------------------------------------------------------------------------- /pkg/cmd/flags/logger_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/logger_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/output.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/output.go -------------------------------------------------------------------------------- /pkg/cmd/flags/output_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/output_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/policy.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/policy.go -------------------------------------------------------------------------------- /pkg/cmd/flags/policy_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/policy_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/proctree.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/proctree.go -------------------------------------------------------------------------------- /pkg/cmd/flags/scope.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/scope.go -------------------------------------------------------------------------------- /pkg/cmd/flags/scope_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/scope_test.go -------------------------------------------------------------------------------- /pkg/cmd/flags/server/server.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/server/server.go -------------------------------------------------------------------------------- /pkg/cmd/flags/server/server_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/flags/server/server_test.go -------------------------------------------------------------------------------- /pkg/cmd/initialize/bpfobject.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/initialize/bpfobject.go -------------------------------------------------------------------------------- /pkg/cmd/initialize/callbacks.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/initialize/callbacks.go -------------------------------------------------------------------------------- /pkg/cmd/initialize/callbacks_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/initialize/callbacks_test.go -------------------------------------------------------------------------------- /pkg/cmd/initialize/kernelconfig.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/initialize/kernelconfig.go -------------------------------------------------------------------------------- /pkg/cmd/initialize/sigs/sigs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/initialize/sigs/sigs.go -------------------------------------------------------------------------------- /pkg/cmd/initialize/sigs/sigs_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/initialize/sigs/sigs_test.go -------------------------------------------------------------------------------- /pkg/cmd/list.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/list.go -------------------------------------------------------------------------------- /pkg/cmd/printer/broadcast.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/printer/broadcast.go -------------------------------------------------------------------------------- /pkg/cmd/printer/printer.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/printer/printer.go -------------------------------------------------------------------------------- /pkg/cmd/printer/printer_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/printer/printer_test.go -------------------------------------------------------------------------------- /pkg/cmd/tracee.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/cmd/tracee.go -------------------------------------------------------------------------------- /pkg/config/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/config/config.go -------------------------------------------------------------------------------- /pkg/datastores/container/containers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/container/containers.go -------------------------------------------------------------------------------- /pkg/datastores/container/datasource.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/container/datasource.go -------------------------------------------------------------------------------- /pkg/datastores/container/path_resolver.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/container/path_resolver.go -------------------------------------------------------------------------------- /pkg/datastores/container/runtime/crio.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/container/runtime/crio.go -------------------------------------------------------------------------------- /pkg/datastores/dns/datasource.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/dns/datasource.go -------------------------------------------------------------------------------- /pkg/datastores/dns/dns_events_test.gz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/dns/dns_events_test.gz -------------------------------------------------------------------------------- /pkg/datastores/dns/dnscache.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/dns/dnscache.go -------------------------------------------------------------------------------- /pkg/datastores/dns/dnscache_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/dns/dnscache_test.go -------------------------------------------------------------------------------- /pkg/datastores/dns/node.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/dns/node.go -------------------------------------------------------------------------------- /pkg/datastores/dns/query.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/dns/query.go -------------------------------------------------------------------------------- /pkg/datastores/process/datasource.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/datasource.go -------------------------------------------------------------------------------- /pkg/datastores/process/fileinfo.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/fileinfo.go -------------------------------------------------------------------------------- /pkg/datastores/process/fileinfo_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/fileinfo_test.go -------------------------------------------------------------------------------- /pkg/datastores/process/process.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/process.go -------------------------------------------------------------------------------- /pkg/datastores/process/process_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/process_test.go -------------------------------------------------------------------------------- /pkg/datastores/process/proctree.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/proctree.go -------------------------------------------------------------------------------- /pkg/datastores/process/proctree_feed.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/proctree_feed.go -------------------------------------------------------------------------------- /pkg/datastores/process/proctree_output.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/proctree_output.go -------------------------------------------------------------------------------- /pkg/datastores/process/proctree_procfs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/proctree_procfs.go -------------------------------------------------------------------------------- /pkg/datastores/process/proctree_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/proctree_test.go -------------------------------------------------------------------------------- /pkg/datastores/process/taskid.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/taskid.go -------------------------------------------------------------------------------- /pkg/datastores/process/taskinfo.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/taskinfo.go -------------------------------------------------------------------------------- /pkg/datastores/process/taskinfo_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/taskinfo_test.go -------------------------------------------------------------------------------- /pkg/datastores/process/thread.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/thread.go -------------------------------------------------------------------------------- /pkg/datastores/process/thread_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/process/thread_test.go -------------------------------------------------------------------------------- /pkg/datastores/symbol/kernel.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/symbol/kernel.go -------------------------------------------------------------------------------- /pkg/datastores/symbol/kernel_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/symbol/kernel_test.go -------------------------------------------------------------------------------- /pkg/datastores/symbol/table.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/symbol/table.go -------------------------------------------------------------------------------- /pkg/datastores/symbol/table_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/datastores/symbol/table_test.go -------------------------------------------------------------------------------- /pkg/ebpf/bpf_log.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/bpf_log.go -------------------------------------------------------------------------------- /pkg/ebpf/c/capture_filtering.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/capture_filtering.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/arch.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/arch.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/arguments.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/arguments.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/binprm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/binprm.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/bpf_prog.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/bpf_prog.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/buffer.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/buffer.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/capabilities.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/capabilities.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/cgroups.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/cgroups.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/common.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/consts.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/consts.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/context.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/context.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/filesystem.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/filesystem.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/filtering.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/filtering.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/hash.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/hash.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/kconfig.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/kconfig.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/ksymbols.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/ksymbols.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/logging.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/logging.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/memory.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/memory.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/namespaces.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/namespaces.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/network.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/network.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/probes.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/probes.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/signal.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/signal.h -------------------------------------------------------------------------------- /pkg/ebpf/c/common/task.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/common/task.h -------------------------------------------------------------------------------- /pkg/ebpf/c/lsmsupport/kprobe_check.bpf.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/lsmsupport/kprobe_check.bpf.c -------------------------------------------------------------------------------- /pkg/ebpf/c/lsmsupport/lsm_check.bpf.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/lsmsupport/lsm_check.bpf.c -------------------------------------------------------------------------------- /pkg/ebpf/c/lsmsupport/lsm_check_common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/lsmsupport/lsm_check_common.h -------------------------------------------------------------------------------- /pkg/ebpf/c/maps.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/maps.h -------------------------------------------------------------------------------- /pkg/ebpf/c/tracee.bpf.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/tracee.bpf.c -------------------------------------------------------------------------------- /pkg/ebpf/c/tracee.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/tracee.h -------------------------------------------------------------------------------- /pkg/ebpf/c/types.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/types.h -------------------------------------------------------------------------------- /pkg/ebpf/c/vmlinux.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/vmlinux.h -------------------------------------------------------------------------------- /pkg/ebpf/c/vmlinux_flavors.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/vmlinux_flavors.h -------------------------------------------------------------------------------- /pkg/ebpf/c/vmlinux_missing.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/c/vmlinux_missing.h -------------------------------------------------------------------------------- /pkg/ebpf/capture.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/capture.go -------------------------------------------------------------------------------- /pkg/ebpf/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/config.go -------------------------------------------------------------------------------- /pkg/ebpf/controlplane/cgroups.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/controlplane/cgroups.go -------------------------------------------------------------------------------- /pkg/ebpf/controlplane/controller.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/controlplane/controller.go -------------------------------------------------------------------------------- /pkg/ebpf/controlplane/processes.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/controlplane/processes.go -------------------------------------------------------------------------------- /pkg/ebpf/controlplane/signal.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/controlplane/signal.go -------------------------------------------------------------------------------- /pkg/ebpf/event_parameters.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/event_parameters.go -------------------------------------------------------------------------------- /pkg/ebpf/events_enrich.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/events_enrich.go -------------------------------------------------------------------------------- /pkg/ebpf/events_pipeline.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/events_pipeline.go -------------------------------------------------------------------------------- /pkg/ebpf/events_pipeline_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/events_pipeline_bench_test.go -------------------------------------------------------------------------------- /pkg/ebpf/extension.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/extension.go -------------------------------------------------------------------------------- /pkg/ebpf/extension_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/extension_test.go -------------------------------------------------------------------------------- /pkg/ebpf/heartbeat/heartbeat.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/heartbeat/heartbeat.go -------------------------------------------------------------------------------- /pkg/ebpf/hidden_kernel_module.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/hidden_kernel_module.go -------------------------------------------------------------------------------- /pkg/ebpf/hooked_syscall_table.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/hooked_syscall_table.go -------------------------------------------------------------------------------- /pkg/ebpf/initialization/kconfig.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/initialization/kconfig.go -------------------------------------------------------------------------------- /pkg/ebpf/ksymbols.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/ksymbols.go -------------------------------------------------------------------------------- /pkg/ebpf/lsmsupport/loader.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/lsmsupport/loader.go -------------------------------------------------------------------------------- /pkg/ebpf/lsmsupport/loader_stub.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/lsmsupport/loader_stub.go -------------------------------------------------------------------------------- /pkg/ebpf/lsmsupport/lsm_support.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/lsmsupport/lsm_support.go -------------------------------------------------------------------------------- /pkg/ebpf/net_capture.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/net_capture.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/arch_amd64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/arch_amd64.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/arch_arm64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/arch_arm64.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/cgroup.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/cgroup.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/common.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/common.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/compatibility.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/compatibility.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/compatibility_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/compatibility_test.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/lsm.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/lsm.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/probe_group.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/probe_group.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/probes.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/probes.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/trace.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/trace.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/uprobe.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/uprobe.go -------------------------------------------------------------------------------- /pkg/ebpf/probes/uprobe_events.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/probes/uprobe_events.go -------------------------------------------------------------------------------- /pkg/ebpf/processor.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/processor.go -------------------------------------------------------------------------------- /pkg/ebpf/processor_dns.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/processor_dns.go -------------------------------------------------------------------------------- /pkg/ebpf/processor_funcs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/processor_funcs.go -------------------------------------------------------------------------------- /pkg/ebpf/processor_proctree.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/processor_proctree.go -------------------------------------------------------------------------------- /pkg/ebpf/processor_proctree_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/processor_proctree_bench_test.go -------------------------------------------------------------------------------- /pkg/ebpf/signature_engine.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/signature_engine.go -------------------------------------------------------------------------------- /pkg/ebpf/tracee.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/tracee.go -------------------------------------------------------------------------------- /pkg/ebpf/triggers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/ebpf/triggers.go -------------------------------------------------------------------------------- /pkg/events/conversion.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/conversion.go -------------------------------------------------------------------------------- /pkg/events/conversion_legacy.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/conversion_legacy.go -------------------------------------------------------------------------------- /pkg/events/conversion_legacy_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/conversion_legacy_test.go -------------------------------------------------------------------------------- /pkg/events/conversion_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/conversion_test.go -------------------------------------------------------------------------------- /pkg/events/core.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/core.go -------------------------------------------------------------------------------- /pkg/events/core_amd64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/core_amd64.go -------------------------------------------------------------------------------- /pkg/events/core_arm64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/core_arm64.go -------------------------------------------------------------------------------- /pkg/events/core_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/core_test.go -------------------------------------------------------------------------------- /pkg/events/data/decode.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/data/decode.go -------------------------------------------------------------------------------- /pkg/events/definition.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/definition.go -------------------------------------------------------------------------------- /pkg/events/definition_datafield.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/definition_datafield.go -------------------------------------------------------------------------------- /pkg/events/definition_dependencies.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/definition_dependencies.go -------------------------------------------------------------------------------- /pkg/events/definition_group.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/definition_group.go -------------------------------------------------------------------------------- /pkg/events/definition_group_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/definition_group_test.go -------------------------------------------------------------------------------- /pkg/events/definition_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/definition_test.go -------------------------------------------------------------------------------- /pkg/events/dependencies/actions.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/actions.go -------------------------------------------------------------------------------- /pkg/events/dependencies/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/errors.go -------------------------------------------------------------------------------- /pkg/events/dependencies/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/event.go -------------------------------------------------------------------------------- /pkg/events/dependencies/manager.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/manager.go -------------------------------------------------------------------------------- /pkg/events/dependencies/manager_events.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/manager_events.go -------------------------------------------------------------------------------- /pkg/events/dependencies/manager_probes.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/manager_probes.go -------------------------------------------------------------------------------- /pkg/events/dependencies/manager_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/manager_test.go -------------------------------------------------------------------------------- /pkg/events/dependencies/probes.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/probes.go -------------------------------------------------------------------------------- /pkg/events/dependencies/tailcalls.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/dependencies/tailcalls.go -------------------------------------------------------------------------------- /pkg/events/derive/container_create.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/container_create.go -------------------------------------------------------------------------------- /pkg/events/derive/container_remove.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/container_remove.go -------------------------------------------------------------------------------- /pkg/events/derive/derive.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/derive.go -------------------------------------------------------------------------------- /pkg/events/derive/derive_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/derive_test.go -------------------------------------------------------------------------------- /pkg/events/derive/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/errors.go -------------------------------------------------------------------------------- /pkg/events/derive/hidden_kernel_module.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/hidden_kernel_module.go -------------------------------------------------------------------------------- /pkg/events/derive/hooked_seq_ops.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/hooked_seq_ops.go -------------------------------------------------------------------------------- /pkg/events/derive/hooked_seq_ops_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/hooked_seq_ops_test.go -------------------------------------------------------------------------------- /pkg/events/derive/hooked_syscall.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/hooked_syscall.go -------------------------------------------------------------------------------- /pkg/events/derive/net_flow.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/net_flow.go -------------------------------------------------------------------------------- /pkg/events/derive/net_packet.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/net_packet.go -------------------------------------------------------------------------------- /pkg/events/derive/net_packet_helpers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/net_packet_helpers.go -------------------------------------------------------------------------------- /pkg/events/derive/net_tcp.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/net_tcp.go -------------------------------------------------------------------------------- /pkg/events/derive/net_tcp_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/net_tcp_test.go -------------------------------------------------------------------------------- /pkg/events/derive/symbols_collision.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/symbols_collision.go -------------------------------------------------------------------------------- /pkg/events/derive/symbols_loaded.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/derive/symbols_loaded.go -------------------------------------------------------------------------------- /pkg/events/event_id_translation.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/event_id_translation.go -------------------------------------------------------------------------------- /pkg/events/event_id_translation_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/event_id_translation_test.go -------------------------------------------------------------------------------- /pkg/events/findings/findings.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/findings/findings.go -------------------------------------------------------------------------------- /pkg/events/findings/findings_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/findings/findings_test.go -------------------------------------------------------------------------------- /pkg/events/ftrace.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/ftrace.go -------------------------------------------------------------------------------- /pkg/events/ftrace_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/ftrace_test.go -------------------------------------------------------------------------------- /pkg/events/parse/params.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse/params.go -------------------------------------------------------------------------------- /pkg/events/parse/params_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse/params_bench_test.go -------------------------------------------------------------------------------- /pkg/events/parse/params_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse/params_test.go -------------------------------------------------------------------------------- /pkg/events/parse_args.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse_args.go -------------------------------------------------------------------------------- /pkg/events/parse_args_bench_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse_args_bench_test.go -------------------------------------------------------------------------------- /pkg/events/parse_args_helpers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse_args_helpers.go -------------------------------------------------------------------------------- /pkg/events/parse_args_helpers_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse_args_helpers_test.go -------------------------------------------------------------------------------- /pkg/events/parse_args_nonext.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse_args_nonext.go -------------------------------------------------------------------------------- /pkg/events/parse_args_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/parse_args_test.go -------------------------------------------------------------------------------- /pkg/events/pipeline_event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/pipeline_event.go -------------------------------------------------------------------------------- /pkg/events/sorting/cpu_queue.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/sorting/cpu_queue.go -------------------------------------------------------------------------------- /pkg/events/sorting/pool.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/sorting/pool.go -------------------------------------------------------------------------------- /pkg/events/sorting/queue.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/sorting/queue.go -------------------------------------------------------------------------------- /pkg/events/sorting/sorting.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/sorting/sorting.go -------------------------------------------------------------------------------- /pkg/events/sorting/sorting_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/sorting/sorting_test.go -------------------------------------------------------------------------------- /pkg/events/trigger/context.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/trigger/context.go -------------------------------------------------------------------------------- /pkg/events/trigger/context_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/trigger/context_test.go -------------------------------------------------------------------------------- /pkg/events/usermode.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/usermode.go -------------------------------------------------------------------------------- /pkg/events/version.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/events/version.go -------------------------------------------------------------------------------- /pkg/filters/benchmarks/string_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/benchmarks/string_test.go -------------------------------------------------------------------------------- /pkg/filters/binary.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/binary.go -------------------------------------------------------------------------------- /pkg/filters/bool.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/bool.go -------------------------------------------------------------------------------- /pkg/filters/bool_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/bool_test.go -------------------------------------------------------------------------------- /pkg/filters/data.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/data.go -------------------------------------------------------------------------------- /pkg/filters/data_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/data_test.go -------------------------------------------------------------------------------- /pkg/filters/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/errors.go -------------------------------------------------------------------------------- /pkg/filters/filters.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/filters.go -------------------------------------------------------------------------------- /pkg/filters/numeric.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/numeric.go -------------------------------------------------------------------------------- /pkg/filters/numeric_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/numeric_test.go -------------------------------------------------------------------------------- /pkg/filters/processtree.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/processtree.go -------------------------------------------------------------------------------- /pkg/filters/processtree_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/processtree_test.go -------------------------------------------------------------------------------- /pkg/filters/scope.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/scope.go -------------------------------------------------------------------------------- /pkg/filters/scope_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/scope_test.go -------------------------------------------------------------------------------- /pkg/filters/sets/prefixset.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/sets/prefixset.go -------------------------------------------------------------------------------- /pkg/filters/sets/sets_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/sets/sets_test.go -------------------------------------------------------------------------------- /pkg/filters/sets/suffixset.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/sets/suffixset.go -------------------------------------------------------------------------------- /pkg/filters/string.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/string.go -------------------------------------------------------------------------------- /pkg/filters/string_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/filters/string_test.go -------------------------------------------------------------------------------- /pkg/k8s/controller/controller.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/k8s/controller/controller.go -------------------------------------------------------------------------------- /pkg/k8s/k8s.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/k8s/k8s.go -------------------------------------------------------------------------------- /pkg/k8s/policy.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/k8s/policy.go -------------------------------------------------------------------------------- /pkg/metrics/channels.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/metrics/channels.go -------------------------------------------------------------------------------- /pkg/metrics/collector.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/metrics/collector.go -------------------------------------------------------------------------------- /pkg/metrics/event_collector.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/metrics/event_collector.go -------------------------------------------------------------------------------- /pkg/metrics/stats.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/metrics/stats.go -------------------------------------------------------------------------------- /pkg/metrics/stats_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/metrics/stats_test.go -------------------------------------------------------------------------------- /pkg/pcaps/cache.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/pcaps/cache.go -------------------------------------------------------------------------------- /pkg/pcaps/common.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/pcaps/common.go -------------------------------------------------------------------------------- /pkg/pcaps/interface.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/pcaps/interface.go -------------------------------------------------------------------------------- /pkg/pcaps/pcap.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/pcaps/pcap.go -------------------------------------------------------------------------------- /pkg/pcaps/pcaps.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/pcaps/pcaps.go -------------------------------------------------------------------------------- /pkg/policy/ebpf.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/ebpf.go -------------------------------------------------------------------------------- /pkg/policy/equality.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/equality.go -------------------------------------------------------------------------------- /pkg/policy/equality_data.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/equality_data.go -------------------------------------------------------------------------------- /pkg/policy/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/errors.go -------------------------------------------------------------------------------- /pkg/policy/event_flags.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/event_flags.go -------------------------------------------------------------------------------- /pkg/policy/event_flags_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/event_flags_test.go -------------------------------------------------------------------------------- /pkg/policy/policies.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policies.go -------------------------------------------------------------------------------- /pkg/policy/policies_compute.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policies_compute.go -------------------------------------------------------------------------------- /pkg/policy/policies_iterator.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policies_iterator.go -------------------------------------------------------------------------------- /pkg/policy/policies_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policies_test.go -------------------------------------------------------------------------------- /pkg/policy/policy.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policy.go -------------------------------------------------------------------------------- /pkg/policy/policy_manager.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policy_manager.go -------------------------------------------------------------------------------- /pkg/policy/policy_manager_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policy_manager_test.go -------------------------------------------------------------------------------- /pkg/policy/policy_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/policy_test.go -------------------------------------------------------------------------------- /pkg/policy/snapshots.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/snapshots.go -------------------------------------------------------------------------------- /pkg/policy/snapshots_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/snapshots_test.go -------------------------------------------------------------------------------- /pkg/policy/v1beta1/policy_file.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/v1beta1/policy_file.go -------------------------------------------------------------------------------- /pkg/policy/v1beta1/policy_file_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/policy/v1beta1/policy_file_test.go -------------------------------------------------------------------------------- /pkg/server/grpc/datasource.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/grpc/datasource.go -------------------------------------------------------------------------------- /pkg/server/grpc/diagnostic.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/grpc/diagnostic.go -------------------------------------------------------------------------------- /pkg/server/grpc/event_data.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/grpc/event_data.go -------------------------------------------------------------------------------- /pkg/server/grpc/event_data_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/grpc/event_data_test.go -------------------------------------------------------------------------------- /pkg/server/grpc/server.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/grpc/server.go -------------------------------------------------------------------------------- /pkg/server/grpc/server_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/grpc/server_test.go -------------------------------------------------------------------------------- /pkg/server/grpc/tracee.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/grpc/tracee.go -------------------------------------------------------------------------------- /pkg/server/http/server.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/http/server.go -------------------------------------------------------------------------------- /pkg/server/http/server_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/server/http/server_test.go -------------------------------------------------------------------------------- /pkg/signatures/benchmark/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/signatures/benchmark/Makefile -------------------------------------------------------------------------------- /pkg/signatures/engine/engine.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/signatures/engine/engine.go -------------------------------------------------------------------------------- /pkg/signatures/engine/engine_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/signatures/engine/engine_test.go -------------------------------------------------------------------------------- /pkg/signatures/metrics/stats.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/signatures/metrics/stats.go -------------------------------------------------------------------------------- /pkg/signatures/signature/signature.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/signatures/signature/signature.go -------------------------------------------------------------------------------- /pkg/streams/streams.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/streams/streams.go -------------------------------------------------------------------------------- /pkg/streams/streams_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/streams/streams_test.go -------------------------------------------------------------------------------- /pkg/version/version.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/pkg/version/version.go -------------------------------------------------------------------------------- /scripts/btfhub.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/btfhub.sh -------------------------------------------------------------------------------- /scripts/checkpatch.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/checkpatch.sh -------------------------------------------------------------------------------- /scripts/disable-unattended-upgrades.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/disable-unattended-upgrades.sh -------------------------------------------------------------------------------- /scripts/installation/install-clang.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/installation/install-clang.sh -------------------------------------------------------------------------------- /scripts/lib.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib.sh -------------------------------------------------------------------------------- /scripts/lib_git.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib_git.sh -------------------------------------------------------------------------------- /scripts/lib_internal.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib_internal.sh -------------------------------------------------------------------------------- /scripts/lib_log.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib_log.sh -------------------------------------------------------------------------------- /scripts/lib_misc.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib_misc.sh -------------------------------------------------------------------------------- /scripts/lib_print.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib_print.sh -------------------------------------------------------------------------------- /scripts/lib_test.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib_test.sh -------------------------------------------------------------------------------- /scripts/lib_testing.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/lib_testing.sh -------------------------------------------------------------------------------- /scripts/run_test_scripts.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/run_test_scripts.sh -------------------------------------------------------------------------------- /scripts/sync_system_time.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/sync_system_time.sh -------------------------------------------------------------------------------- /scripts/tracee_common.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/tracee_common.sh -------------------------------------------------------------------------------- /scripts/tracee_start.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/tracee_start.sh -------------------------------------------------------------------------------- /scripts/tracee_stop.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/tracee_stop.sh -------------------------------------------------------------------------------- /scripts/verify_man_md_sync.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/scripts/verify_man_md_sync.sh -------------------------------------------------------------------------------- /signatures/golang/aslr_inspection.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/aslr_inspection.go -------------------------------------------------------------------------------- /signatures/golang/disk_mount.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/disk_mount.go -------------------------------------------------------------------------------- /signatures/golang/disk_mount_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/disk_mount_test.go -------------------------------------------------------------------------------- /signatures/golang/docker_abuse.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/docker_abuse.go -------------------------------------------------------------------------------- /signatures/golang/docker_abuse_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/docker_abuse_test.go -------------------------------------------------------------------------------- /signatures/golang/dropped_executable.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/dropped_executable.go -------------------------------------------------------------------------------- /signatures/golang/examples/example.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/examples/example.go -------------------------------------------------------------------------------- /signatures/golang/export.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/export.go -------------------------------------------------------------------------------- /signatures/golang/fileless_execution.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/fileless_execution.go -------------------------------------------------------------------------------- /signatures/golang/illegitimate_shell.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/illegitimate_shell.go -------------------------------------------------------------------------------- /signatures/golang/ld_preload.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/ld_preload.go -------------------------------------------------------------------------------- /signatures/golang/ld_preload_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/ld_preload_test.go -------------------------------------------------------------------------------- /signatures/golang/proc_fops_hooking.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/proc_fops_hooking.go -------------------------------------------------------------------------------- /signatures/golang/proc_kcore_read.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/proc_kcore_read.go -------------------------------------------------------------------------------- /signatures/golang/proc_mem_access.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/proc_mem_access.go -------------------------------------------------------------------------------- /signatures/golang/rcd_modification.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/rcd_modification.go -------------------------------------------------------------------------------- /signatures/golang/sched_debug_recon.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/sched_debug_recon.go -------------------------------------------------------------------------------- /signatures/golang/stdio_over_socket.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/stdio_over_socket.go -------------------------------------------------------------------------------- /signatures/golang/test_helpers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/signatures/golang/test_helpers.go -------------------------------------------------------------------------------- /staticcheck.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/staticcheck.conf -------------------------------------------------------------------------------- /tests/e2e-common.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-common.sh -------------------------------------------------------------------------------- /tests/e2e-inst-signatures/e2e-lsm.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-inst-signatures/e2e-lsm.go -------------------------------------------------------------------------------- /tests/e2e-inst-signatures/export.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-inst-signatures/export.go -------------------------------------------------------------------------------- /tests/e2e-inst-test-core.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-inst-test-core.sh -------------------------------------------------------------------------------- /tests/e2e-inst-test-extended.sh.example: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-inst-test-extended.sh.example -------------------------------------------------------------------------------- /tests/e2e-inst-test.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-inst-test.sh -------------------------------------------------------------------------------- /tests/e2e-install-deps.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-install-deps.sh -------------------------------------------------------------------------------- /tests/e2e-kernel-test.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-kernel-test.sh -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-dns.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-dns.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-http.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-http.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-icmp.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-icmp.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-icmpv6.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-icmpv6.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-ipv4.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-ipv4.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-ipv6.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-ipv6.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-tcp.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-tcp.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/e2e-udp.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/e2e-udp.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/export.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/export.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/helpers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/helpers.go -------------------------------------------------------------------------------- /tests/e2e-net-signatures/scripts/dns.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/scripts/dns.sh -------------------------------------------------------------------------------- /tests/e2e-net-signatures/scripts/tcp.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/scripts/tcp.sh -------------------------------------------------------------------------------- /tests/e2e-net-signatures/scripts/udp.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-signatures/scripts/udp.sh -------------------------------------------------------------------------------- /tests/e2e-net-test.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/e2e-net-test.sh -------------------------------------------------------------------------------- /tests/integration/capture_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/integration/capture_test.go -------------------------------------------------------------------------------- /tests/integration/common_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/integration/common_test.go -------------------------------------------------------------------------------- /tests/integration/dependencies_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/integration/dependencies_test.go -------------------------------------------------------------------------------- /tests/integration/event_filters_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/integration/event_filters_test.go -------------------------------------------------------------------------------- /tests/integration/exec_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/integration/exec_test.go -------------------------------------------------------------------------------- /tests/integration/integration_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/integration/integration_test.go -------------------------------------------------------------------------------- /tests/libbpfgo.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/libbpfgo.sh -------------------------------------------------------------------------------- /tests/perftests/metrics_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/perftests/metrics_test.go -------------------------------------------------------------------------------- /tests/policies/inst/bpf_attach.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/bpf_attach.yaml -------------------------------------------------------------------------------- /tests/policies/inst/containers_ds.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/containers_ds.yaml -------------------------------------------------------------------------------- /tests/policies/inst/dns_ds.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/dns_ds.yaml -------------------------------------------------------------------------------- /tests/policies/inst/ftrace_hook.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/ftrace_hook.yaml -------------------------------------------------------------------------------- /tests/policies/inst/hooked_syscall.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/hooked_syscall.yaml -------------------------------------------------------------------------------- /tests/policies/inst/lsm_test.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/lsm_test.yaml -------------------------------------------------------------------------------- /tests/policies/inst/proctree_ds.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/proctree_ds.yaml -------------------------------------------------------------------------------- /tests/policies/inst/setfspwd.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/setfspwd.yaml -------------------------------------------------------------------------------- /tests/policies/inst/stack_pivot.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/stack_pivot.yaml -------------------------------------------------------------------------------- /tests/policies/inst/vfs_write.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/vfs_write.yaml -------------------------------------------------------------------------------- /tests/policies/inst/writable_ds.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/inst/writable_ds.yaml -------------------------------------------------------------------------------- /tests/policies/kernel/kernel.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/kernel/kernel.yaml -------------------------------------------------------------------------------- /tests/policies/net/dns.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/net/dns.yaml -------------------------------------------------------------------------------- /tests/policies/net/http.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/net/http.yaml -------------------------------------------------------------------------------- /tests/policies/net/icmp.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/net/icmp.yaml -------------------------------------------------------------------------------- /tests/policies/net/ip.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/net/ip.yaml -------------------------------------------------------------------------------- /tests/policies/net/tcp.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/net/tcp.yaml -------------------------------------------------------------------------------- /tests/policies/net/udp.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/policies/net/udp.yaml -------------------------------------------------------------------------------- /tests/testutils/cpu.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/testutils/cpu.go -------------------------------------------------------------------------------- /tests/testutils/errors.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/testutils/errors.go -------------------------------------------------------------------------------- /tests/testutils/exec.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/testutils/exec.go -------------------------------------------------------------------------------- /tests/testutils/logger.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/testutils/logger.go -------------------------------------------------------------------------------- /tests/testutils/policies.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/testutils/policies.go -------------------------------------------------------------------------------- /tests/testutils/tracee_cmd.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/testutils/tracee_cmd.go -------------------------------------------------------------------------------- /tests/testutils/tracee_integrated.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/tests/testutils/tracee_integrated.go -------------------------------------------------------------------------------- /types/datasource/proctree.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/datasource/proctree.go -------------------------------------------------------------------------------- /types/detect/detect.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/detect/detect.go -------------------------------------------------------------------------------- /types/detect/detect_test.go: -------------------------------------------------------------------------------- 1 | package detect 2 | -------------------------------------------------------------------------------- /types/detect/finding.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/detect/finding.go -------------------------------------------------------------------------------- /types/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/go.mod -------------------------------------------------------------------------------- /types/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/go.sum -------------------------------------------------------------------------------- /types/protocol/protocol.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/protocol/protocol.go -------------------------------------------------------------------------------- /types/protocol/protocol_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/protocol/protocol_test.go -------------------------------------------------------------------------------- /types/trace/network_trace.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/trace/network_trace.go -------------------------------------------------------------------------------- /types/trace/network_trace_test.go: -------------------------------------------------------------------------------- 1 | package trace 2 | -------------------------------------------------------------------------------- /types/trace/trace.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/trace/trace.go -------------------------------------------------------------------------------- /types/trace/trace_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aquasecurity/tracee/HEAD/types/trace/trace_test.go --------------------------------------------------------------------------------