├── .dockerignore ├── .github ├── PULL_REQUEST_TEMPLATE.md └── workflows │ ├── ci.yaml │ ├── lint.yaml │ ├── publish-main.yaml │ └── release.yaml ├── .gitignore ├── .golangci.yml ├── .goreleaser.yml ├── Dockerfile ├── LICENSE ├── Makefile ├── OWNERS ├── README.md ├── cmd ├── bench.go ├── common.go ├── config_options.go ├── internal │ └── validate │ │ ├── isfilepath.go │ │ ├── islogruslevel.go │ │ └── validate.go ├── list.go ├── root.go ├── run.go ├── suite │ ├── config │ │ ├── config.go │ │ └── doc.go │ ├── doc.go │ ├── explain │ │ ├── doc.go │ │ ├── encoders.go │ │ └── explain.go │ ├── run │ │ ├── doc.go │ │ └── run.go │ ├── suite.go │ └── test │ │ ├── doc.go │ │ └── test.go └── test.go ├── docs ├── event-generator.md ├── event-generator_bench.md ├── event-generator_list.md ├── event-generator_run.md └── event-generator_test.md ├── events ├── README.md ├── helper │ ├── combined_server_client.go │ ├── do_nothing.go │ ├── exec_ls.go │ ├── inbound_connection.go │ ├── network_activity.go │ ├── outbound_connection.go │ └── run_shell.go ├── interfaces.go ├── k8saudit │ ├── yaml │ │ ├── cluster-role-with-pod-exec-created.yaml │ │ ├── cluster-role-with-wildcard-created.yaml │ │ ├── cluster-role-with-write-privileges-created.yaml │ │ ├── create-disallowed-pod.yaml │ │ ├── create-host-network-pod.yaml │ │ ├── create-modify-configmap-with-private-credentials.yaml │ │ ├── create-node-port-service.yaml │ │ ├── create-privileged-pod.yaml │ │ ├── create-sensitive-mount-pod.yaml │ │ ├── k8s-config-map-created.yaml │ │ ├── k8s-deployment-created.yaml │ │ ├── k8s-service-created.yaml │ │ └── k8s-serviceaccount-created.yaml │ ├── yaml_disabled.go │ └── yaml_loader.go ├── options.go ├── registry.go └── syscall │ ├── adding_ssh_keys_to_authorized_keys.go │ ├── change_namespace_privileges_via_unshare.go │ ├── change_thread_namespace.go │ ├── clear_log_activities.go │ ├── contact_ec2_instance_metadata_service_from_container.go │ ├── container_drift_detected_chmod.go │ ├── container_drift_detected_open_create.go │ ├── create_files_below_dev.go │ ├── create_hardlink_over_sensitive_files.go │ ├── create_hidden_files_or_directories.go │ ├── create_symlink_over_sensitive_files.go │ ├── db_program_spawned_process.go │ ├── debugfs_launched_in_privilleged_container.go │ ├── decoding_payload_in_container.go │ ├── delete_or_rename_shell_history.go │ ├── detect_crypto_miners_using_the_stratum_protocol.go │ ├── detect_release_agent_file_container_escapes.go │ ├── directory_traversal_monitored_file_read.go │ ├── disallowed_ssh_connection_non_standard_port.go │ ├── drop_and_execute_new_binary_in_container.go │ ├── execution_from_dev_shm.go │ ├── fileless_execution_via_memfd_create.go │ ├── find_aws_credentials.go │ ├── interpreted_procs_inbound_network_activity.go │ ├── interpreted_procs_outbound_network_activity.go │ ├── java_process_class_file_download.go │ ├── kubernetes_client_tool_launched_in_container.go │ ├── launch_ingress_remote_file_copy_tools_in_container.go │ ├── launch_package_management_process_in_container.go │ ├── launch_remote_file_copy_tools_in_container.go │ ├── launch_suspicious_network_tool_in_container.go │ ├── launch_suspicious_network_tool_on_host.go │ ├── mkdir_binary_dirs.go │ ├── modify_binary_dirs.go │ ├── modify_container_entrypoint.go │ ├── modify_shell_configuration_file.go │ ├── mount_launched_in_privileged_container.go │ ├── netcat_remote_code_execution_in_container.go │ ├── non_sudo_setuid.go │ ├── packet_socket_created_in_container.go │ ├── polkit_local_privilege_escalation_vulnerability_cve20214034.go │ ├── potential_local_privilege_escalation_via_environment_variables_misuse.go │ ├── program_run_with_disallowed_http_proxy_env.go │ ├── ptrace_anti_debug_attempt.go │ ├── ptrace_attached_to_process.go │ ├── read_environment_variable_from_proc_files.go │ ├── read_sensitive_file_trusted_after_startup.go │ ├── read_sensitive_file_untrusted.go │ ├── read_shell_configuration_file.go │ ├── read_ssh_information.go │ ├── remove_bulk_data_from_disk.go │ ├── run_shell_untrusted.go │ ├── schedule_cron_jobs.go │ ├── search_private_keys_or_passwords.go │ ├── set_setuid_or_setgid_bit.go │ ├── sudo_potential_privilege_escalaton.go │ ├── system_procs_network_activity.go │ ├── system_user_interactive.go │ ├── unexpected_udp_traffic.go │ ├── unprivileged_delegation_of_page_faults_handling_to_a_userspace_process.go │ ├── user_mgmt_binaries.go │ ├── utils.go │ ├── utils_linux.go │ ├── write_below_binary_dir.go │ ├── write_below_etc.go │ ├── write_below_monitored_dir.go │ ├── write_below_root.go │ └── write_below_rpm_database.go ├── go.mod ├── go.sum ├── main.go ├── pkg ├── alert │ ├── alert.go │ ├── doc.go │ └── retriever │ │ └── grpcretriever │ │ ├── doc.go │ │ └── grpcretriever.go ├── baggage │ ├── baggage.go │ └── doc.go ├── capability │ ├── capability.go │ └── doc.go ├── container │ ├── builder │ │ ├── builder.go │ │ └── doc.go │ ├── container.go │ └── doc.go ├── counter │ ├── counter.go │ ├── options.go │ └── stats.go ├── log │ ├── doc.go │ └── log.go ├── osutil │ ├── doc.go │ └── osutil.go ├── process │ ├── builder │ │ ├── builder.go │ │ └── doc.go │ ├── doc.go │ └── process.go ├── random │ ├── doc.go │ └── random.go ├── runner │ ├── helper.go │ ├── options.go │ ├── options_test.go │ ├── plugin.go │ └── runner.go ├── test │ ├── builder │ │ ├── builder.go │ │ └── doc.go │ ├── doc.go │ ├── field │ │ ├── doc.go │ │ └── field.go │ ├── loader │ │ ├── doc.go │ │ ├── loader.go │ │ ├── schema │ │ │ ├── describe.go │ │ │ ├── doc.go │ │ │ ├── jsonschemas │ │ │ │ ├── binding.schema.json │ │ │ │ ├── case.schema.json │ │ │ │ ├── cases │ │ │ │ │ ├── matrix.schema.json │ │ │ │ │ └── vector.schema.json │ │ │ │ ├── context.schema.json │ │ │ │ ├── description.schema.json │ │ │ │ ├── expectedOutcome.schema.json │ │ │ │ ├── resource.schema.json │ │ │ │ ├── resources │ │ │ │ │ ├── clientServer.schema.json │ │ │ │ │ ├── fd.schema.json │ │ │ │ │ ├── fd │ │ │ │ │ │ ├── directory.schema.json │ │ │ │ │ │ ├── event.schema.json │ │ │ │ │ │ ├── eventpoll.schema.json │ │ │ │ │ │ ├── file.schema.json │ │ │ │ │ │ ├── inotify.schema.json │ │ │ │ │ │ ├── memfd.schema.json │ │ │ │ │ │ ├── pipe.schema.json │ │ │ │ │ │ └── signalfd.schema.json │ │ │ │ │ └── process.schema.json │ │ │ │ ├── step.schema.json │ │ │ │ ├── steps │ │ │ │ │ ├── syscall.schema.json │ │ │ │ │ └── syscalls │ │ │ │ │ │ ├── connect.schema.json │ │ │ │ │ │ ├── dup.schema.json │ │ │ │ │ │ ├── dup2.schema.json │ │ │ │ │ │ ├── dup3.schema.json │ │ │ │ │ │ ├── finitModule.schema.json │ │ │ │ │ │ ├── initModule.schema.json │ │ │ │ │ │ ├── kill.schema.json │ │ │ │ │ │ ├── link.schema.json │ │ │ │ │ │ ├── linkAt.schema.json │ │ │ │ │ │ ├── open.schema.json │ │ │ │ │ │ ├── openAt.schema.json │ │ │ │ │ │ ├── openAt2.schema.json │ │ │ │ │ │ ├── read.schema.json │ │ │ │ │ │ ├── sendTo.schema.json │ │ │ │ │ │ ├── socket.schema.json │ │ │ │ │ │ ├── symLink.schema.json │ │ │ │ │ │ ├── symLinkAt.schema.json │ │ │ │ │ │ └── write.schema.json │ │ │ │ └── test.schema.json │ │ │ ├── schema.go │ │ │ └── validate.go │ │ └── template.go │ ├── resource │ │ ├── builder │ │ │ ├── builder.go │ │ │ └── doc.go │ │ ├── clientserver │ │ │ ├── clientserver.go │ │ │ └── doc.go │ │ ├── doc.go │ │ ├── fd │ │ │ ├── directory │ │ │ │ ├── directory.go │ │ │ │ └── doc.go │ │ │ ├── epoll │ │ │ │ ├── doc.go │ │ │ │ └── epoll.go │ │ │ ├── event │ │ │ │ ├── doc.go │ │ │ │ └── event.go │ │ │ ├── file │ │ │ │ ├── doc.go │ │ │ │ └── file.go │ │ │ ├── inotify │ │ │ │ ├── doc.go │ │ │ │ └── inotify.go │ │ │ ├── mem │ │ │ │ ├── doc.go │ │ │ │ └── mem.go │ │ │ ├── pipe │ │ │ │ ├── doc.go │ │ │ │ └── pipe.go │ │ │ └── signal │ │ │ │ ├── doc.go │ │ │ │ └── signal.go │ │ ├── process │ │ │ ├── doc.go │ │ │ └── process.go │ │ └── resource.go │ ├── runner │ │ ├── builder │ │ │ ├── builder.go │ │ │ └── doc.go │ │ ├── doc.go │ │ ├── host │ │ │ ├── doc.go │ │ │ └── host.go │ │ └── runner.go │ ├── script │ │ └── shell │ │ │ ├── doc.go │ │ │ └── shell.go │ ├── step │ │ ├── builder │ │ │ ├── builder.go │ │ │ └── doc.go │ │ ├── doc.go │ │ ├── step.go │ │ └── syscall │ │ │ ├── base │ │ │ ├── base.go │ │ │ ├── consts.go │ │ │ ├── doc.go │ │ │ └── parse.go │ │ │ ├── builder │ │ │ ├── builder.go │ │ │ └── doc.go │ │ │ ├── connect │ │ │ ├── connect.go │ │ │ └── doc.go │ │ │ ├── doc.go │ │ │ ├── dup │ │ │ ├── doc.go │ │ │ └── dup.go │ │ │ ├── dup2 │ │ │ ├── doc.go │ │ │ ├── dup2.go │ │ │ └── dup2_arm64.go │ │ │ ├── dup3 │ │ │ ├── doc.go │ │ │ └── dup3.go │ │ │ ├── finitmodule │ │ │ ├── doc.go │ │ │ └── finitmodule.go │ │ │ ├── initmodule │ │ │ ├── doc.go │ │ │ └── initmodule.go │ │ │ ├── kill │ │ │ ├── doc.go │ │ │ └── kill.go │ │ │ ├── link │ │ │ ├── doc.go │ │ │ ├── link.go │ │ │ └── link_arm64.go │ │ │ ├── linkat │ │ │ ├── doc.go │ │ │ └── linkat.go │ │ │ ├── open │ │ │ ├── doc.go │ │ │ ├── open.go │ │ │ └── open_arm64.go │ │ │ ├── openat │ │ │ ├── doc.go │ │ │ └── openat.go │ │ │ ├── openat2 │ │ │ ├── doc.go │ │ │ └── openat2.go │ │ │ ├── read │ │ │ ├── doc.go │ │ │ └── read.go │ │ │ ├── sendto │ │ │ ├── doc.go │ │ │ └── sendto.go │ │ │ ├── socket │ │ │ ├── doc.go │ │ │ └── socket.go │ │ │ ├── symlink │ │ │ ├── doc.go │ │ │ ├── symlink.go │ │ │ └── symlink_arm64.go │ │ │ ├── symlinkat │ │ │ ├── doc.go │ │ │ └── symlinkat.go │ │ │ ├── syscall.go │ │ │ └── write │ │ │ ├── doc.go │ │ │ └── write.go │ ├── suite │ │ ├── doc.go │ │ ├── loader │ │ │ ├── doc.go │ │ │ └── loader.go │ │ ├── reportencoder │ │ │ ├── jsonencoder │ │ │ │ ├── doc.go │ │ │ │ └── jsonencoder.go │ │ │ ├── textencoder │ │ │ │ ├── doc.go │ │ │ │ └── textencoder.go │ │ │ └── yamlencoder │ │ │ │ ├── doc.go │ │ │ │ └── yamlencoder.go │ │ ├── source │ │ │ ├── doc.go │ │ │ └── source.go │ │ └── suite.go │ ├── test.go │ ├── test │ │ ├── doc.go │ │ └── test.go │ └── tester │ │ ├── doc.go │ │ ├── tester.go │ │ └── tester │ │ ├── doc.go │ │ └── tester.go └── tester │ ├── options.go │ └── tester.go ├── release.md ├── test └── events │ └── init_test.go └── tools ├── docgen └── docgen.go └── file-bundler └── main.go /.dockerignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.dockerignore -------------------------------------------------------------------------------- /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.github/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /.github/workflows/ci.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.github/workflows/ci.yaml -------------------------------------------------------------------------------- /.github/workflows/lint.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.github/workflows/lint.yaml -------------------------------------------------------------------------------- /.github/workflows/publish-main.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.github/workflows/publish-main.yaml -------------------------------------------------------------------------------- /.github/workflows/release.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.github/workflows/release.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.gitignore -------------------------------------------------------------------------------- /.golangci.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.golangci.yml -------------------------------------------------------------------------------- /.goreleaser.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/.goreleaser.yml -------------------------------------------------------------------------------- /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/Dockerfile -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/Makefile -------------------------------------------------------------------------------- /OWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/OWNERS -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/README.md -------------------------------------------------------------------------------- /cmd/bench.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/bench.go -------------------------------------------------------------------------------- /cmd/common.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/common.go -------------------------------------------------------------------------------- /cmd/config_options.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/config_options.go -------------------------------------------------------------------------------- /cmd/internal/validate/isfilepath.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/internal/validate/isfilepath.go -------------------------------------------------------------------------------- /cmd/internal/validate/islogruslevel.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/internal/validate/islogruslevel.go -------------------------------------------------------------------------------- /cmd/internal/validate/validate.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/internal/validate/validate.go -------------------------------------------------------------------------------- /cmd/list.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/list.go -------------------------------------------------------------------------------- /cmd/root.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/root.go -------------------------------------------------------------------------------- /cmd/run.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/run.go -------------------------------------------------------------------------------- /cmd/suite/config/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/config/config.go -------------------------------------------------------------------------------- /cmd/suite/config/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/config/doc.go -------------------------------------------------------------------------------- /cmd/suite/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/doc.go -------------------------------------------------------------------------------- /cmd/suite/explain/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/explain/doc.go -------------------------------------------------------------------------------- /cmd/suite/explain/encoders.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/explain/encoders.go -------------------------------------------------------------------------------- /cmd/suite/explain/explain.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/explain/explain.go -------------------------------------------------------------------------------- /cmd/suite/run/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/run/doc.go -------------------------------------------------------------------------------- /cmd/suite/run/run.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/run/run.go -------------------------------------------------------------------------------- /cmd/suite/suite.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/suite.go -------------------------------------------------------------------------------- /cmd/suite/test/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/test/doc.go -------------------------------------------------------------------------------- /cmd/suite/test/test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/suite/test/test.go -------------------------------------------------------------------------------- /cmd/test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/cmd/test.go -------------------------------------------------------------------------------- /docs/event-generator.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/docs/event-generator.md -------------------------------------------------------------------------------- /docs/event-generator_bench.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/docs/event-generator_bench.md -------------------------------------------------------------------------------- /docs/event-generator_list.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/docs/event-generator_list.md -------------------------------------------------------------------------------- /docs/event-generator_run.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/docs/event-generator_run.md -------------------------------------------------------------------------------- /docs/event-generator_test.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/docs/event-generator_test.md -------------------------------------------------------------------------------- /events/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/README.md -------------------------------------------------------------------------------- /events/helper/combined_server_client.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/helper/combined_server_client.go -------------------------------------------------------------------------------- /events/helper/do_nothing.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/helper/do_nothing.go -------------------------------------------------------------------------------- /events/helper/exec_ls.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/helper/exec_ls.go -------------------------------------------------------------------------------- /events/helper/inbound_connection.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/helper/inbound_connection.go -------------------------------------------------------------------------------- /events/helper/network_activity.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/helper/network_activity.go -------------------------------------------------------------------------------- /events/helper/outbound_connection.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/helper/outbound_connection.go -------------------------------------------------------------------------------- /events/helper/run_shell.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/helper/run_shell.go -------------------------------------------------------------------------------- /events/interfaces.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/interfaces.go -------------------------------------------------------------------------------- /events/k8saudit/yaml/cluster-role-with-pod-exec-created.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/cluster-role-with-pod-exec-created.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/cluster-role-with-wildcard-created.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/cluster-role-with-wildcard-created.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/cluster-role-with-write-privileges-created.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/cluster-role-with-write-privileges-created.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/create-disallowed-pod.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/create-disallowed-pod.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/create-host-network-pod.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/create-host-network-pod.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/create-modify-configmap-with-private-credentials.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/create-modify-configmap-with-private-credentials.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/create-node-port-service.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/create-node-port-service.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/create-privileged-pod.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/create-privileged-pod.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/create-sensitive-mount-pod.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/create-sensitive-mount-pod.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/k8s-config-map-created.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/k8s-config-map-created.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/k8s-deployment-created.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/k8s-deployment-created.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/k8s-service-created.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/k8s-service-created.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml/k8s-serviceaccount-created.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml/k8s-serviceaccount-created.yaml -------------------------------------------------------------------------------- /events/k8saudit/yaml_disabled.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml_disabled.go -------------------------------------------------------------------------------- /events/k8saudit/yaml_loader.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/k8saudit/yaml_loader.go -------------------------------------------------------------------------------- /events/options.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/options.go -------------------------------------------------------------------------------- /events/registry.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/registry.go -------------------------------------------------------------------------------- /events/syscall/adding_ssh_keys_to_authorized_keys.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/adding_ssh_keys_to_authorized_keys.go -------------------------------------------------------------------------------- /events/syscall/change_namespace_privileges_via_unshare.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/change_namespace_privileges_via_unshare.go -------------------------------------------------------------------------------- /events/syscall/change_thread_namespace.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/change_thread_namespace.go -------------------------------------------------------------------------------- /events/syscall/clear_log_activities.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/clear_log_activities.go -------------------------------------------------------------------------------- /events/syscall/contact_ec2_instance_metadata_service_from_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/contact_ec2_instance_metadata_service_from_container.go -------------------------------------------------------------------------------- /events/syscall/container_drift_detected_chmod.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/container_drift_detected_chmod.go -------------------------------------------------------------------------------- /events/syscall/container_drift_detected_open_create.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/container_drift_detected_open_create.go -------------------------------------------------------------------------------- /events/syscall/create_files_below_dev.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/create_files_below_dev.go -------------------------------------------------------------------------------- /events/syscall/create_hardlink_over_sensitive_files.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/create_hardlink_over_sensitive_files.go -------------------------------------------------------------------------------- /events/syscall/create_hidden_files_or_directories.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/create_hidden_files_or_directories.go -------------------------------------------------------------------------------- /events/syscall/create_symlink_over_sensitive_files.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/create_symlink_over_sensitive_files.go -------------------------------------------------------------------------------- /events/syscall/db_program_spawned_process.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/db_program_spawned_process.go -------------------------------------------------------------------------------- /events/syscall/debugfs_launched_in_privilleged_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/debugfs_launched_in_privilleged_container.go -------------------------------------------------------------------------------- /events/syscall/decoding_payload_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/decoding_payload_in_container.go -------------------------------------------------------------------------------- /events/syscall/delete_or_rename_shell_history.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/delete_or_rename_shell_history.go -------------------------------------------------------------------------------- /events/syscall/detect_crypto_miners_using_the_stratum_protocol.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/detect_crypto_miners_using_the_stratum_protocol.go -------------------------------------------------------------------------------- /events/syscall/detect_release_agent_file_container_escapes.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/detect_release_agent_file_container_escapes.go -------------------------------------------------------------------------------- /events/syscall/directory_traversal_monitored_file_read.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/directory_traversal_monitored_file_read.go -------------------------------------------------------------------------------- /events/syscall/disallowed_ssh_connection_non_standard_port.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/disallowed_ssh_connection_non_standard_port.go -------------------------------------------------------------------------------- /events/syscall/drop_and_execute_new_binary_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/drop_and_execute_new_binary_in_container.go -------------------------------------------------------------------------------- /events/syscall/execution_from_dev_shm.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/execution_from_dev_shm.go -------------------------------------------------------------------------------- /events/syscall/fileless_execution_via_memfd_create.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/fileless_execution_via_memfd_create.go -------------------------------------------------------------------------------- /events/syscall/find_aws_credentials.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/find_aws_credentials.go -------------------------------------------------------------------------------- /events/syscall/interpreted_procs_inbound_network_activity.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/interpreted_procs_inbound_network_activity.go -------------------------------------------------------------------------------- /events/syscall/interpreted_procs_outbound_network_activity.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/interpreted_procs_outbound_network_activity.go -------------------------------------------------------------------------------- /events/syscall/java_process_class_file_download.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/java_process_class_file_download.go -------------------------------------------------------------------------------- /events/syscall/kubernetes_client_tool_launched_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/kubernetes_client_tool_launched_in_container.go -------------------------------------------------------------------------------- /events/syscall/launch_ingress_remote_file_copy_tools_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/launch_ingress_remote_file_copy_tools_in_container.go -------------------------------------------------------------------------------- /events/syscall/launch_package_management_process_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/launch_package_management_process_in_container.go -------------------------------------------------------------------------------- /events/syscall/launch_remote_file_copy_tools_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/launch_remote_file_copy_tools_in_container.go -------------------------------------------------------------------------------- /events/syscall/launch_suspicious_network_tool_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/launch_suspicious_network_tool_in_container.go -------------------------------------------------------------------------------- /events/syscall/launch_suspicious_network_tool_on_host.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/launch_suspicious_network_tool_on_host.go -------------------------------------------------------------------------------- /events/syscall/mkdir_binary_dirs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/mkdir_binary_dirs.go -------------------------------------------------------------------------------- /events/syscall/modify_binary_dirs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/modify_binary_dirs.go -------------------------------------------------------------------------------- /events/syscall/modify_container_entrypoint.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/modify_container_entrypoint.go -------------------------------------------------------------------------------- /events/syscall/modify_shell_configuration_file.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/modify_shell_configuration_file.go -------------------------------------------------------------------------------- /events/syscall/mount_launched_in_privileged_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/mount_launched_in_privileged_container.go -------------------------------------------------------------------------------- /events/syscall/netcat_remote_code_execution_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/netcat_remote_code_execution_in_container.go -------------------------------------------------------------------------------- /events/syscall/non_sudo_setuid.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/non_sudo_setuid.go -------------------------------------------------------------------------------- /events/syscall/packet_socket_created_in_container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/packet_socket_created_in_container.go -------------------------------------------------------------------------------- /events/syscall/polkit_local_privilege_escalation_vulnerability_cve20214034.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/polkit_local_privilege_escalation_vulnerability_cve20214034.go -------------------------------------------------------------------------------- /events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/potential_local_privilege_escalation_via_environment_variables_misuse.go -------------------------------------------------------------------------------- /events/syscall/program_run_with_disallowed_http_proxy_env.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/program_run_with_disallowed_http_proxy_env.go -------------------------------------------------------------------------------- /events/syscall/ptrace_anti_debug_attempt.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/ptrace_anti_debug_attempt.go -------------------------------------------------------------------------------- /events/syscall/ptrace_attached_to_process.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/ptrace_attached_to_process.go -------------------------------------------------------------------------------- /events/syscall/read_environment_variable_from_proc_files.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/read_environment_variable_from_proc_files.go -------------------------------------------------------------------------------- /events/syscall/read_sensitive_file_trusted_after_startup.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/read_sensitive_file_trusted_after_startup.go -------------------------------------------------------------------------------- /events/syscall/read_sensitive_file_untrusted.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/read_sensitive_file_untrusted.go -------------------------------------------------------------------------------- /events/syscall/read_shell_configuration_file.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/read_shell_configuration_file.go -------------------------------------------------------------------------------- /events/syscall/read_ssh_information.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/read_ssh_information.go -------------------------------------------------------------------------------- /events/syscall/remove_bulk_data_from_disk.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/remove_bulk_data_from_disk.go -------------------------------------------------------------------------------- /events/syscall/run_shell_untrusted.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/run_shell_untrusted.go -------------------------------------------------------------------------------- /events/syscall/schedule_cron_jobs.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/schedule_cron_jobs.go -------------------------------------------------------------------------------- /events/syscall/search_private_keys_or_passwords.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/search_private_keys_or_passwords.go -------------------------------------------------------------------------------- /events/syscall/set_setuid_or_setgid_bit.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/set_setuid_or_setgid_bit.go -------------------------------------------------------------------------------- /events/syscall/sudo_potential_privilege_escalaton.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/sudo_potential_privilege_escalaton.go -------------------------------------------------------------------------------- /events/syscall/system_procs_network_activity.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/system_procs_network_activity.go -------------------------------------------------------------------------------- /events/syscall/system_user_interactive.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/system_user_interactive.go -------------------------------------------------------------------------------- /events/syscall/unexpected_udp_traffic.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/unexpected_udp_traffic.go -------------------------------------------------------------------------------- /events/syscall/unprivileged_delegation_of_page_faults_handling_to_a_userspace_process.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/unprivileged_delegation_of_page_faults_handling_to_a_userspace_process.go -------------------------------------------------------------------------------- /events/syscall/user_mgmt_binaries.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/user_mgmt_binaries.go -------------------------------------------------------------------------------- /events/syscall/utils.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/utils.go -------------------------------------------------------------------------------- /events/syscall/utils_linux.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/utils_linux.go -------------------------------------------------------------------------------- /events/syscall/write_below_binary_dir.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/write_below_binary_dir.go -------------------------------------------------------------------------------- /events/syscall/write_below_etc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/write_below_etc.go -------------------------------------------------------------------------------- /events/syscall/write_below_monitored_dir.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/write_below_monitored_dir.go -------------------------------------------------------------------------------- /events/syscall/write_below_root.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/write_below_root.go -------------------------------------------------------------------------------- /events/syscall/write_below_rpm_database.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/events/syscall/write_below_rpm_database.go -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/go.sum -------------------------------------------------------------------------------- /main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/main.go -------------------------------------------------------------------------------- /pkg/alert/alert.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/alert/alert.go -------------------------------------------------------------------------------- /pkg/alert/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/alert/doc.go -------------------------------------------------------------------------------- /pkg/alert/retriever/grpcretriever/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/alert/retriever/grpcretriever/doc.go -------------------------------------------------------------------------------- /pkg/alert/retriever/grpcretriever/grpcretriever.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/alert/retriever/grpcretriever/grpcretriever.go -------------------------------------------------------------------------------- /pkg/baggage/baggage.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/baggage/baggage.go -------------------------------------------------------------------------------- /pkg/baggage/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/baggage/doc.go -------------------------------------------------------------------------------- /pkg/capability/capability.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/capability/capability.go -------------------------------------------------------------------------------- /pkg/capability/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/capability/doc.go -------------------------------------------------------------------------------- /pkg/container/builder/builder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/container/builder/builder.go -------------------------------------------------------------------------------- /pkg/container/builder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/container/builder/doc.go -------------------------------------------------------------------------------- /pkg/container/container.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/container/container.go -------------------------------------------------------------------------------- /pkg/container/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/container/doc.go -------------------------------------------------------------------------------- /pkg/counter/counter.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/counter/counter.go -------------------------------------------------------------------------------- /pkg/counter/options.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/counter/options.go -------------------------------------------------------------------------------- /pkg/counter/stats.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/counter/stats.go -------------------------------------------------------------------------------- /pkg/log/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/log/doc.go -------------------------------------------------------------------------------- /pkg/log/log.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/log/log.go -------------------------------------------------------------------------------- /pkg/osutil/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/osutil/doc.go -------------------------------------------------------------------------------- /pkg/osutil/osutil.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/osutil/osutil.go -------------------------------------------------------------------------------- /pkg/process/builder/builder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/process/builder/builder.go -------------------------------------------------------------------------------- /pkg/process/builder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/process/builder/doc.go -------------------------------------------------------------------------------- /pkg/process/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/process/doc.go -------------------------------------------------------------------------------- /pkg/process/process.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/process/process.go -------------------------------------------------------------------------------- /pkg/random/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/random/doc.go -------------------------------------------------------------------------------- /pkg/random/random.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/random/random.go -------------------------------------------------------------------------------- /pkg/runner/helper.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/runner/helper.go -------------------------------------------------------------------------------- /pkg/runner/options.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/runner/options.go -------------------------------------------------------------------------------- /pkg/runner/options_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/runner/options_test.go -------------------------------------------------------------------------------- /pkg/runner/plugin.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/runner/plugin.go -------------------------------------------------------------------------------- /pkg/runner/runner.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/runner/runner.go -------------------------------------------------------------------------------- /pkg/test/builder/builder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/builder/builder.go -------------------------------------------------------------------------------- /pkg/test/builder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/builder/doc.go -------------------------------------------------------------------------------- /pkg/test/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/doc.go -------------------------------------------------------------------------------- /pkg/test/field/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/field/doc.go -------------------------------------------------------------------------------- /pkg/test/field/field.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/field/field.go -------------------------------------------------------------------------------- /pkg/test/loader/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/doc.go -------------------------------------------------------------------------------- /pkg/test/loader/loader.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/loader.go -------------------------------------------------------------------------------- /pkg/test/loader/schema/describe.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/describe.go -------------------------------------------------------------------------------- /pkg/test/loader/schema/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/doc.go -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/binding.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/binding.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/case.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/case.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/cases/matrix.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/cases/matrix.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/cases/vector.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/cases/vector.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/context.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/context.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/description.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/description.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/expectedOutcome.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/expectedOutcome.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resource.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resource.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/clientServer.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/clientServer.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/directory.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/directory.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/event.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/event.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/eventpoll.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/eventpoll.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/file.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/file.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/inotify.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/inotify.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/memfd.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/memfd.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/pipe.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/pipe.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/fd/signalfd.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/fd/signalfd.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/resources/process.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/resources/process.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/step.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/step.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscall.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscall.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/connect.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/connect.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/dup.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/dup.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/dup2.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/dup2.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/dup3.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/dup3.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/finitModule.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/finitModule.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/initModule.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/initModule.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/kill.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/kill.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/link.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/link.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/linkAt.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/linkAt.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/open.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/open.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/openAt.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/openAt.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/openAt2.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/openAt2.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/read.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/read.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/sendTo.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/sendTo.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/socket.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/socket.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/symLink.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/symLink.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/symLinkAt.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/symLinkAt.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/steps/syscalls/write.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/steps/syscalls/write.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/jsonschemas/test.schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/jsonschemas/test.schema.json -------------------------------------------------------------------------------- /pkg/test/loader/schema/schema.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/schema.go -------------------------------------------------------------------------------- /pkg/test/loader/schema/validate.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/schema/validate.go -------------------------------------------------------------------------------- /pkg/test/loader/template.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/loader/template.go -------------------------------------------------------------------------------- /pkg/test/resource/builder/builder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/builder/builder.go -------------------------------------------------------------------------------- /pkg/test/resource/builder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/builder/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/clientserver/clientserver.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/clientserver/clientserver.go -------------------------------------------------------------------------------- /pkg/test/resource/clientserver/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/clientserver/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/directory/directory.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/directory/directory.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/directory/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/directory/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/epoll/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/epoll/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/epoll/epoll.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/epoll/epoll.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/event/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/event/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/event/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/event/event.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/file/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/file/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/file/file.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/file/file.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/inotify/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/inotify/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/inotify/inotify.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/inotify/inotify.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/mem/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/mem/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/mem/mem.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/mem/mem.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/pipe/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/pipe/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/pipe/pipe.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/pipe/pipe.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/signal/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/signal/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/fd/signal/signal.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/fd/signal/signal.go -------------------------------------------------------------------------------- /pkg/test/resource/process/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/process/doc.go -------------------------------------------------------------------------------- /pkg/test/resource/process/process.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/process/process.go -------------------------------------------------------------------------------- /pkg/test/resource/resource.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/resource/resource.go -------------------------------------------------------------------------------- /pkg/test/runner/builder/builder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/runner/builder/builder.go -------------------------------------------------------------------------------- /pkg/test/runner/builder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/runner/builder/doc.go -------------------------------------------------------------------------------- /pkg/test/runner/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/runner/doc.go -------------------------------------------------------------------------------- /pkg/test/runner/host/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/runner/host/doc.go -------------------------------------------------------------------------------- /pkg/test/runner/host/host.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/runner/host/host.go -------------------------------------------------------------------------------- /pkg/test/runner/runner.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/runner/runner.go -------------------------------------------------------------------------------- /pkg/test/script/shell/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/script/shell/doc.go -------------------------------------------------------------------------------- /pkg/test/script/shell/shell.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/script/shell/shell.go -------------------------------------------------------------------------------- /pkg/test/step/builder/builder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/builder/builder.go -------------------------------------------------------------------------------- /pkg/test/step/builder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/builder/doc.go -------------------------------------------------------------------------------- /pkg/test/step/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/doc.go -------------------------------------------------------------------------------- /pkg/test/step/step.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/step.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/base/base.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/base/base.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/base/consts.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/base/consts.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/base/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/base/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/base/parse.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/base/parse.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/builder/builder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/builder/builder.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/builder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/builder/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/connect/connect.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/connect/connect.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/connect/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/connect/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/dup/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/dup/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/dup/dup.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/dup/dup.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/dup2/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/dup2/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/dup2/dup2.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/dup2/dup2.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/dup2/dup2_arm64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/dup2/dup2_arm64.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/dup3/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/dup3/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/dup3/dup3.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/dup3/dup3.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/finitmodule/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/finitmodule/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/finitmodule/finitmodule.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/finitmodule/finitmodule.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/initmodule/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/initmodule/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/initmodule/initmodule.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/initmodule/initmodule.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/kill/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/kill/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/kill/kill.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/kill/kill.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/link/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/link/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/link/link.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/link/link.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/link/link_arm64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/link/link_arm64.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/linkat/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/linkat/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/linkat/linkat.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/linkat/linkat.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/open/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/open/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/open/open.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/open/open.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/open/open_arm64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/open/open_arm64.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/openat/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/openat/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/openat/openat.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/openat/openat.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/openat2/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/openat2/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/openat2/openat2.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/openat2/openat2.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/read/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/read/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/read/read.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/read/read.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/sendto/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/sendto/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/sendto/sendto.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/sendto/sendto.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/socket/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/socket/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/socket/socket.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/socket/socket.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/symlink/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/symlink/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/symlink/symlink.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/symlink/symlink.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/symlink/symlink_arm64.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/symlink/symlink_arm64.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/symlinkat/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/symlinkat/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/symlinkat/symlinkat.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/symlinkat/symlinkat.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/syscall.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/syscall.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/write/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/write/doc.go -------------------------------------------------------------------------------- /pkg/test/step/syscall/write/write.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/step/syscall/write/write.go -------------------------------------------------------------------------------- /pkg/test/suite/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/doc.go -------------------------------------------------------------------------------- /pkg/test/suite/loader/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/loader/doc.go -------------------------------------------------------------------------------- /pkg/test/suite/loader/loader.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/loader/loader.go -------------------------------------------------------------------------------- /pkg/test/suite/reportencoder/jsonencoder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/reportencoder/jsonencoder/doc.go -------------------------------------------------------------------------------- /pkg/test/suite/reportencoder/jsonencoder/jsonencoder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/reportencoder/jsonencoder/jsonencoder.go -------------------------------------------------------------------------------- /pkg/test/suite/reportencoder/textencoder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/reportencoder/textencoder/doc.go -------------------------------------------------------------------------------- /pkg/test/suite/reportencoder/textencoder/textencoder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/reportencoder/textencoder/textencoder.go -------------------------------------------------------------------------------- /pkg/test/suite/reportencoder/yamlencoder/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/reportencoder/yamlencoder/doc.go -------------------------------------------------------------------------------- /pkg/test/suite/reportencoder/yamlencoder/yamlencoder.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/reportencoder/yamlencoder/yamlencoder.go -------------------------------------------------------------------------------- /pkg/test/suite/source/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/source/doc.go -------------------------------------------------------------------------------- /pkg/test/suite/source/source.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/source/source.go -------------------------------------------------------------------------------- /pkg/test/suite/suite.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/suite/suite.go -------------------------------------------------------------------------------- /pkg/test/test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/test.go -------------------------------------------------------------------------------- /pkg/test/test/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/test/doc.go -------------------------------------------------------------------------------- /pkg/test/test/test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/test/test.go -------------------------------------------------------------------------------- /pkg/test/tester/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/tester/doc.go -------------------------------------------------------------------------------- /pkg/test/tester/tester.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/tester/tester.go -------------------------------------------------------------------------------- /pkg/test/tester/tester/doc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/tester/tester/doc.go -------------------------------------------------------------------------------- /pkg/test/tester/tester/tester.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/test/tester/tester/tester.go -------------------------------------------------------------------------------- /pkg/tester/options.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/tester/options.go -------------------------------------------------------------------------------- /pkg/tester/tester.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/pkg/tester/tester.go -------------------------------------------------------------------------------- /release.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/release.md -------------------------------------------------------------------------------- /test/events/init_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/test/events/init_test.go -------------------------------------------------------------------------------- /tools/docgen/docgen.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/tools/docgen/docgen.go -------------------------------------------------------------------------------- /tools/file-bundler/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/event-generator/HEAD/tools/file-bundler/main.go --------------------------------------------------------------------------------