├── .gitignore ├── .vscode └── settings.json ├── Makefile ├── README.md ├── cmd ├── config.json └── main.go ├── go.mod ├── go.sum ├── io_uring_example ├── README.md └── main.c ├── pkg ├── client │ ├── executer.go │ ├── executer_test.go │ └── puller.go ├── common │ ├── commands.go │ ├── execute.go │ ├── readfile.go │ ├── request.go │ ├── symlink.go │ └── writefile.go ├── config │ ├── config.go │ └── types.go ├── mock │ ├── client.go │ └── simple │ │ ├── simple.go │ │ └── simple_test.go ├── prechecks │ └── .gitkeep └── server │ └── server.go ├── poc ├── POC.md ├── assets │ ├── Falco-bypassing.mp4 │ └── Falco-simple-detection.mp4 └── falco_custom_rules.yaml ├── server └── main.go └── settings.json /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/.gitignore -------------------------------------------------------------------------------- /.vscode/settings.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/.vscode/settings.json -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/Makefile -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/README.md -------------------------------------------------------------------------------- /cmd/config.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/cmd/config.json -------------------------------------------------------------------------------- /cmd/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/cmd/main.go -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/go.sum -------------------------------------------------------------------------------- /io_uring_example/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/io_uring_example/README.md -------------------------------------------------------------------------------- /io_uring_example/main.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/io_uring_example/main.c -------------------------------------------------------------------------------- /pkg/client/executer.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/client/executer.go -------------------------------------------------------------------------------- /pkg/client/executer_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/client/executer_test.go -------------------------------------------------------------------------------- /pkg/client/puller.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/client/puller.go -------------------------------------------------------------------------------- /pkg/common/commands.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/common/commands.go -------------------------------------------------------------------------------- /pkg/common/execute.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/common/execute.go -------------------------------------------------------------------------------- /pkg/common/readfile.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/common/readfile.go -------------------------------------------------------------------------------- /pkg/common/request.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/common/request.go -------------------------------------------------------------------------------- /pkg/common/symlink.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/common/symlink.go -------------------------------------------------------------------------------- /pkg/common/writefile.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/common/writefile.go -------------------------------------------------------------------------------- /pkg/config/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/config/config.go -------------------------------------------------------------------------------- /pkg/config/types.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/config/types.go -------------------------------------------------------------------------------- /pkg/mock/client.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/mock/client.go -------------------------------------------------------------------------------- /pkg/mock/simple/simple.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/mock/simple/simple.go -------------------------------------------------------------------------------- /pkg/mock/simple/simple_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/mock/simple/simple_test.go -------------------------------------------------------------------------------- /pkg/prechecks/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /pkg/server/server.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/pkg/server/server.go -------------------------------------------------------------------------------- /poc/POC.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/poc/POC.md -------------------------------------------------------------------------------- /poc/assets/Falco-bypassing.mp4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/poc/assets/Falco-bypassing.mp4 -------------------------------------------------------------------------------- /poc/assets/Falco-simple-detection.mp4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/poc/assets/Falco-simple-detection.mp4 -------------------------------------------------------------------------------- /poc/falco_custom_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/poc/falco_custom_rules.yaml -------------------------------------------------------------------------------- /server/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/server/main.go -------------------------------------------------------------------------------- /settings.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/armosec/curing/HEAD/settings.json --------------------------------------------------------------------------------