├── .circleci └── OWNERS ├── .clang-format ├── .clang-format-ignore ├── .cmake-format.json ├── .codespellignore ├── .dockerignore ├── .git-blame-ignore-revs ├── .github ├── PULL_REQUEST_TEMPLATE.md ├── dependabot.yml ├── release_template.md └── workflows │ ├── bump-libs.yaml │ ├── ci.yml │ ├── codeql.yaml │ ├── codespell.yml │ ├── engine-version-weakcheck.yaml │ ├── format.yaml │ ├── insecure-api.yaml │ ├── master.yaml │ ├── release.yaml │ ├── reusable_build_dev.yaml │ ├── reusable_build_docker.yaml │ ├── reusable_build_packages.yaml │ ├── reusable_fetch_version.yaml │ ├── reusable_publish_docker.yaml │ ├── reusable_publish_packages.yaml │ ├── reusable_test_packages.yaml │ ├── scorecard.yaml │ └── staticanalysis.yaml ├── .gitignore ├── .gitmodules ├── .pre-commit-config.yaml ├── .yamllint.conf ├── ADOPTERS.md ├── CHANGELOG.md ├── CMakeLists.txt ├── COPYING ├── Contributing.md ├── LICENSE ├── Makefile ├── OWNERS ├── README.md ├── RELEASE.md ├── audits ├── SECURITY_AUDIT_2019_07.pdf └── SECURITY_AUDIT_2023_01_23-01-1097-LIV.pdf ├── brand ├── README.md ├── primary-logo.png ├── teal-logo.svg └── white-logo.png ├── cmake ├── cpack │ ├── CMakeCPackOptions.cmake │ └── debian │ │ └── conffiles └── modules │ ├── CPackConfig.cmake │ ├── CompilerFlags.cmake │ ├── Coverage.cmake │ ├── cares.cmake │ ├── copy_files_to_build_dir.cmake │ ├── cpp-httplib.cmake │ ├── curl.cmake │ ├── cxxopts.cmake │ ├── driver-repo │ └── CMakeLists.txt │ ├── driver.cmake │ ├── falco-version.cmake │ ├── falcoctl.cmake │ ├── falcosecurity-libs-repo │ └── CMakeLists.txt │ ├── falcosecurity-libs.cmake │ ├── grpc.cmake │ ├── jemalloc.cmake │ ├── mimalloc.cmake │ ├── njson.cmake │ ├── openssl.cmake │ ├── rules.cmake │ ├── static-analysis.cmake │ └── yaml-cpp.cmake ├── config ├── falco.container_plugin.yaml └── falco.iso8601_timeformat.yaml ├── docker ├── OWNERS ├── README.md ├── docker-compose │ ├── README.md │ ├── config │ │ └── http_output.yml │ └── docker-compose.yaml ├── driver-loader-buster │ ├── Dockerfile │ └── docker-entrypoint.sh ├── driver-loader │ ├── Dockerfile │ └── docker-entrypoint.sh ├── falco-debian │ └── Dockerfile └── falco │ └── Dockerfile ├── falco.yaml ├── proposals ├── 20190826-grpc-output-single-alert-sequence.png ├── 20190826-grpc-outputs.md ├── 20190909-psp-rules-support.md ├── 20191030-api.md ├── 20191217-rules-naming-convention.md ├── 20200506-artifacts-scope-part-1.md ├── 20200506-artifacts-scope-part-2.md ├── 20200818-artifacts-storage.md ├── 20200828-structured-exception-handling.md ├── 20200901-artifacts-cleanup.md ├── 20201025-drivers-storage-s3.md ├── 20201025-drivers-storage-s3_downloads.png ├── 20210119-libraries-contribution.md ├── 20210501-plugin-system.md ├── 20221129-artifacts-distribution.md ├── 20230511-roadmap-management.md ├── 20230620-anomaly-detection-framework.md ├── 20231220-features-adoption-and-deprecation.md └── kubeconna23-anomaly-detection-slides.pdf ├── rules ├── scripts ├── CMakeLists.txt ├── debian │ ├── postinst.in │ ├── postrm.in │ └── prerm.in ├── description.txt ├── falcoctl │ └── falcoctl.yaml.in ├── publish-bin ├── publish-deb ├── publish-rpm ├── publish-wasm ├── rpm │ ├── postinstall.in │ ├── postuninstall.in │ └── preuninstall.in └── systemd │ ├── falco-bpf.service │ ├── falco-custom.service │ ├── falco-kmod-inject.service │ ├── falco-kmod.service │ ├── falco-modern-bpf.service │ └── falcoctl-artifact-follow.service ├── semgrep ├── insecure-api-gets.yaml ├── insecure-api-sprintf-vsprintf.yaml ├── insecure-api-strcpy-stpcpy-strcat.yaml └── insecure-api-strn.yaml ├── tools └── local_hooks │ └── dco-pre-commit-msg.sh ├── unit_tests ├── CMakeLists.txt ├── README.md ├── engine │ ├── test_add_source.cpp │ ├── test_alt_rule_loader.cpp │ ├── test_enable_rule.cpp │ ├── test_extra_output.cpp │ ├── test_falco_utils.cpp │ ├── test_filter_details_resolver.cpp │ ├── test_filter_macro_resolver.cpp │ ├── test_filter_warning_resolver.cpp │ ├── test_plugin_requirements.cpp │ ├── test_rule_loader.cpp │ └── test_rulesets.cpp ├── falco │ ├── app │ │ └── actions │ │ │ ├── app_action_helpers.h │ │ │ ├── test_configure_interesting_sets.cpp │ │ │ ├── test_configure_syscall_buffer_num.cpp │ │ │ ├── test_load_config.cpp │ │ │ └── test_select_event_sources.cpp │ ├── test_atomic_signal_handler.cpp │ ├── test_capture.cpp │ ├── test_configs │ │ ├── engine_kmod_config.yaml │ │ └── engine_modern_config.yaml │ ├── test_configuration.cpp │ ├── test_configuration_config_files.cpp │ ├── test_configuration_env_vars.cpp │ ├── test_configuration_output_options.cpp │ ├── test_configuration_rule_selection.cpp │ └── test_configuration_schema.cpp ├── falco_test_var.h.in ├── test_falco_engine.cpp └── test_falco_engine.h └── userspace ├── engine ├── CMakeLists.txt ├── OWNERS ├── evttype_index_ruleset.cpp ├── evttype_index_ruleset.h ├── falco_common.cpp ├── falco_common.h ├── falco_engine.cpp ├── falco_engine.h ├── falco_engine_version.h ├── falco_load_result.cpp ├── falco_load_result.h ├── falco_rule.h ├── falco_source.h ├── falco_utils.cpp ├── falco_utils.h ├── filter_details_resolver.cpp ├── filter_details_resolver.h ├── filter_macro_resolver.cpp ├── filter_macro_resolver.h ├── filter_ruleset.cpp ├── filter_ruleset.h ├── filter_warning_resolver.cpp ├── filter_warning_resolver.h ├── formats.cpp ├── formats.h ├── indexable_ruleset.h ├── indexed_vector.h ├── logger.cpp ├── logger.h ├── rule_json_schema.h ├── rule_loader.cpp ├── rule_loader.h ├── rule_loader_collector.cpp ├── rule_loader_collector.h ├── rule_loader_compile_output.h ├── rule_loader_compiler.cpp ├── rule_loader_compiler.h ├── rule_loader_reader.cpp ├── rule_loader_reader.h ├── rule_loading_messages.h ├── stats_manager.cpp ├── stats_manager.h └── yaml_helper.h └── falco ├── CMakeLists.txt ├── app ├── actions │ ├── actions.h │ ├── close_inspectors.cpp │ ├── configure_interesting_sets.cpp │ ├── configure_syscall_buffer_num.cpp │ ├── configure_syscall_buffer_size.cpp │ ├── create_requested_paths.cpp │ ├── create_signal_handlers.cpp │ ├── helpers.h │ ├── helpers_generic.cpp │ ├── helpers_inspector.cpp │ ├── init_falco_engine.cpp │ ├── init_inspectors.cpp │ ├── init_outputs.cpp │ ├── list_fields.cpp │ ├── list_plugins.cpp │ ├── load_config.cpp │ ├── load_plugins.cpp │ ├── load_rules_files.cpp │ ├── pidfile.cpp │ ├── print_config_schema.cpp │ ├── print_generated_gvisor_config.cpp │ ├── print_help.cpp │ ├── print_ignored_events.cpp │ ├── print_kernel_version.cpp │ ├── print_page_size.cpp │ ├── print_plugin_info.cpp │ ├── print_rule_schema.cpp │ ├── print_support.cpp │ ├── print_syscall_events.cpp │ ├── print_version.cpp │ ├── process_events.cpp │ ├── select_event_sources.cpp │ ├── start_grpc_server.cpp │ ├── start_webserver.cpp │ └── validate_rules_files.cpp ├── app.cpp ├── app.h ├── options.cpp ├── options.h ├── restart_handler.cpp ├── restart_handler.h ├── run_result.h ├── signals.h └── state.h ├── atomic_signal_handler.h ├── config_falco.h.in ├── config_json_schema.h ├── configuration.cpp ├── configuration.h ├── event_drops.cpp ├── event_drops.h ├── falco.cpp ├── falco_metrics.cpp ├── falco_metrics.h ├── falco_outputs.cpp ├── falco_outputs.h ├── falco_semaphore.h ├── grpc_context.cpp ├── grpc_context.h ├── grpc_queue.h ├── grpc_request_context.cpp ├── grpc_request_context.h ├── grpc_server.cpp ├── grpc_server.h ├── outputs.h ├── outputs.proto ├── outputs_file.cpp ├── outputs_file.h ├── outputs_grpc.cpp ├── outputs_grpc.h ├── outputs_http.cpp ├── outputs_http.h ├── outputs_program.cpp ├── outputs_program.h ├── outputs_stdout.cpp ├── outputs_stdout.h ├── outputs_syslog.cpp ├── outputs_syslog.h ├── schema.proto ├── stats_writer.cpp ├── stats_writer.h ├── version.proto ├── versions_info.cpp ├── versions_info.h ├── watchdog.h ├── webserver.cpp └── webserver.h /.circleci/OWNERS: -------------------------------------------------------------------------------- 1 | emeritus_approvers: 2 | - jonahjon 3 | -------------------------------------------------------------------------------- /.clang-format: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.clang-format -------------------------------------------------------------------------------- /.clang-format-ignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.clang-format-ignore -------------------------------------------------------------------------------- /.cmake-format.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.cmake-format.json -------------------------------------------------------------------------------- /.codespellignore: -------------------------------------------------------------------------------- 1 | aks 2 | creat 3 | chage 4 | ro 5 | -------------------------------------------------------------------------------- /.dockerignore: -------------------------------------------------------------------------------- 1 | * 2 | !config/ 3 | !docker/ 4 | -------------------------------------------------------------------------------- /.git-blame-ignore-revs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.git-blame-ignore-revs -------------------------------------------------------------------------------- /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/dependabot.yml -------------------------------------------------------------------------------- /.github/release_template.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/release_template.md -------------------------------------------------------------------------------- /.github/workflows/bump-libs.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/bump-libs.yaml -------------------------------------------------------------------------------- /.github/workflows/ci.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/ci.yml -------------------------------------------------------------------------------- /.github/workflows/codeql.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/codeql.yaml -------------------------------------------------------------------------------- /.github/workflows/codespell.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/codespell.yml -------------------------------------------------------------------------------- /.github/workflows/engine-version-weakcheck.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/engine-version-weakcheck.yaml -------------------------------------------------------------------------------- /.github/workflows/format.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/format.yaml -------------------------------------------------------------------------------- /.github/workflows/insecure-api.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/insecure-api.yaml -------------------------------------------------------------------------------- /.github/workflows/master.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/master.yaml -------------------------------------------------------------------------------- /.github/workflows/release.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/release.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_build_dev.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/reusable_build_dev.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_build_docker.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/reusable_build_docker.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_build_packages.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/reusable_build_packages.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_fetch_version.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/reusable_fetch_version.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_publish_docker.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/reusable_publish_docker.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_publish_packages.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/reusable_publish_packages.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_test_packages.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/reusable_test_packages.yaml -------------------------------------------------------------------------------- /.github/workflows/scorecard.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/scorecard.yaml -------------------------------------------------------------------------------- /.github/workflows/staticanalysis.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.github/workflows/staticanalysis.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | /build* 2 | *~ 3 | *.pyc 4 | 5 | .vscode/* 6 | 7 | *.idea* 8 | CMakeUserPresets.json 9 | -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.gitmodules -------------------------------------------------------------------------------- /.pre-commit-config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.pre-commit-config.yaml -------------------------------------------------------------------------------- /.yamllint.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/.yamllint.conf -------------------------------------------------------------------------------- /ADOPTERS.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/ADOPTERS.md -------------------------------------------------------------------------------- /CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/CHANGELOG.md -------------------------------------------------------------------------------- /CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/CMakeLists.txt -------------------------------------------------------------------------------- /COPYING: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/COPYING -------------------------------------------------------------------------------- /Contributing.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/Contributing.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/Makefile -------------------------------------------------------------------------------- /OWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/OWNERS -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/README.md -------------------------------------------------------------------------------- /RELEASE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/RELEASE.md -------------------------------------------------------------------------------- /audits/SECURITY_AUDIT_2019_07.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/audits/SECURITY_AUDIT_2019_07.pdf -------------------------------------------------------------------------------- /audits/SECURITY_AUDIT_2023_01_23-01-1097-LIV.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/audits/SECURITY_AUDIT_2023_01_23-01-1097-LIV.pdf -------------------------------------------------------------------------------- /brand/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/brand/README.md -------------------------------------------------------------------------------- /brand/primary-logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/brand/primary-logo.png -------------------------------------------------------------------------------- /brand/teal-logo.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/brand/teal-logo.svg -------------------------------------------------------------------------------- /brand/white-logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/brand/white-logo.png -------------------------------------------------------------------------------- /cmake/cpack/CMakeCPackOptions.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/cpack/CMakeCPackOptions.cmake -------------------------------------------------------------------------------- /cmake/cpack/debian/conffiles: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/cpack/debian/conffiles -------------------------------------------------------------------------------- /cmake/modules/CPackConfig.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/CPackConfig.cmake -------------------------------------------------------------------------------- /cmake/modules/CompilerFlags.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/CompilerFlags.cmake -------------------------------------------------------------------------------- /cmake/modules/Coverage.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/Coverage.cmake -------------------------------------------------------------------------------- /cmake/modules/cares.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/cares.cmake -------------------------------------------------------------------------------- /cmake/modules/copy_files_to_build_dir.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/copy_files_to_build_dir.cmake -------------------------------------------------------------------------------- /cmake/modules/cpp-httplib.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/cpp-httplib.cmake -------------------------------------------------------------------------------- /cmake/modules/curl.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/curl.cmake -------------------------------------------------------------------------------- /cmake/modules/cxxopts.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/cxxopts.cmake -------------------------------------------------------------------------------- /cmake/modules/driver-repo/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/driver-repo/CMakeLists.txt -------------------------------------------------------------------------------- /cmake/modules/driver.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/driver.cmake -------------------------------------------------------------------------------- /cmake/modules/falco-version.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/falco-version.cmake -------------------------------------------------------------------------------- /cmake/modules/falcoctl.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/falcoctl.cmake -------------------------------------------------------------------------------- /cmake/modules/falcosecurity-libs-repo/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/falcosecurity-libs-repo/CMakeLists.txt -------------------------------------------------------------------------------- /cmake/modules/falcosecurity-libs.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/falcosecurity-libs.cmake -------------------------------------------------------------------------------- /cmake/modules/grpc.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/grpc.cmake -------------------------------------------------------------------------------- /cmake/modules/jemalloc.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/jemalloc.cmake -------------------------------------------------------------------------------- /cmake/modules/mimalloc.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/mimalloc.cmake -------------------------------------------------------------------------------- /cmake/modules/njson.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/njson.cmake -------------------------------------------------------------------------------- /cmake/modules/openssl.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/openssl.cmake -------------------------------------------------------------------------------- /cmake/modules/rules.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/rules.cmake -------------------------------------------------------------------------------- /cmake/modules/static-analysis.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/static-analysis.cmake -------------------------------------------------------------------------------- /cmake/modules/yaml-cpp.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/cmake/modules/yaml-cpp.cmake -------------------------------------------------------------------------------- /config/falco.container_plugin.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/config/falco.container_plugin.yaml -------------------------------------------------------------------------------- /config/falco.iso8601_timeformat.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/config/falco.iso8601_timeformat.yaml -------------------------------------------------------------------------------- /docker/OWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/OWNERS -------------------------------------------------------------------------------- /docker/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/README.md -------------------------------------------------------------------------------- /docker/docker-compose/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/docker-compose/README.md -------------------------------------------------------------------------------- /docker/docker-compose/config/http_output.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/docker-compose/config/http_output.yml -------------------------------------------------------------------------------- /docker/docker-compose/docker-compose.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/docker-compose/docker-compose.yaml -------------------------------------------------------------------------------- /docker/driver-loader-buster/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/driver-loader-buster/Dockerfile -------------------------------------------------------------------------------- /docker/driver-loader-buster/docker-entrypoint.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/driver-loader-buster/docker-entrypoint.sh -------------------------------------------------------------------------------- /docker/driver-loader/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/driver-loader/Dockerfile -------------------------------------------------------------------------------- /docker/driver-loader/docker-entrypoint.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/driver-loader/docker-entrypoint.sh -------------------------------------------------------------------------------- /docker/falco-debian/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/falco-debian/Dockerfile -------------------------------------------------------------------------------- /docker/falco/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/docker/falco/Dockerfile -------------------------------------------------------------------------------- /falco.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/falco.yaml -------------------------------------------------------------------------------- /proposals/20190826-grpc-output-single-alert-sequence.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20190826-grpc-output-single-alert-sequence.png -------------------------------------------------------------------------------- /proposals/20190826-grpc-outputs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20190826-grpc-outputs.md -------------------------------------------------------------------------------- /proposals/20190909-psp-rules-support.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20190909-psp-rules-support.md -------------------------------------------------------------------------------- /proposals/20191030-api.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20191030-api.md -------------------------------------------------------------------------------- /proposals/20191217-rules-naming-convention.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20191217-rules-naming-convention.md -------------------------------------------------------------------------------- /proposals/20200506-artifacts-scope-part-1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20200506-artifacts-scope-part-1.md -------------------------------------------------------------------------------- /proposals/20200506-artifacts-scope-part-2.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20200506-artifacts-scope-part-2.md -------------------------------------------------------------------------------- /proposals/20200818-artifacts-storage.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20200818-artifacts-storage.md -------------------------------------------------------------------------------- /proposals/20200828-structured-exception-handling.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20200828-structured-exception-handling.md -------------------------------------------------------------------------------- /proposals/20200901-artifacts-cleanup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20200901-artifacts-cleanup.md -------------------------------------------------------------------------------- /proposals/20201025-drivers-storage-s3.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20201025-drivers-storage-s3.md -------------------------------------------------------------------------------- /proposals/20201025-drivers-storage-s3_downloads.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20201025-drivers-storage-s3_downloads.png -------------------------------------------------------------------------------- /proposals/20210119-libraries-contribution.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20210119-libraries-contribution.md -------------------------------------------------------------------------------- /proposals/20210501-plugin-system.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20210501-plugin-system.md -------------------------------------------------------------------------------- /proposals/20221129-artifacts-distribution.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20221129-artifacts-distribution.md -------------------------------------------------------------------------------- /proposals/20230511-roadmap-management.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20230511-roadmap-management.md -------------------------------------------------------------------------------- /proposals/20230620-anomaly-detection-framework.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20230620-anomaly-detection-framework.md -------------------------------------------------------------------------------- /proposals/20231220-features-adoption-and-deprecation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/20231220-features-adoption-and-deprecation.md -------------------------------------------------------------------------------- /proposals/kubeconna23-anomaly-detection-slides.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/proposals/kubeconna23-anomaly-detection-slides.pdf -------------------------------------------------------------------------------- /rules: -------------------------------------------------------------------------------- 1 | ./submodules/falcosecurity-rules/rules -------------------------------------------------------------------------------- /scripts/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/CMakeLists.txt -------------------------------------------------------------------------------- /scripts/debian/postinst.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/debian/postinst.in -------------------------------------------------------------------------------- /scripts/debian/postrm.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/debian/postrm.in -------------------------------------------------------------------------------- /scripts/debian/prerm.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/debian/prerm.in -------------------------------------------------------------------------------- /scripts/description.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/description.txt -------------------------------------------------------------------------------- /scripts/falcoctl/falcoctl.yaml.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/falcoctl/falcoctl.yaml.in -------------------------------------------------------------------------------- /scripts/publish-bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/publish-bin -------------------------------------------------------------------------------- /scripts/publish-deb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/publish-deb -------------------------------------------------------------------------------- /scripts/publish-rpm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/publish-rpm -------------------------------------------------------------------------------- /scripts/publish-wasm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/publish-wasm -------------------------------------------------------------------------------- /scripts/rpm/postinstall.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/rpm/postinstall.in -------------------------------------------------------------------------------- /scripts/rpm/postuninstall.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/rpm/postuninstall.in -------------------------------------------------------------------------------- /scripts/rpm/preuninstall.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/rpm/preuninstall.in -------------------------------------------------------------------------------- /scripts/systemd/falco-bpf.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/systemd/falco-bpf.service -------------------------------------------------------------------------------- /scripts/systemd/falco-custom.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/systemd/falco-custom.service -------------------------------------------------------------------------------- /scripts/systemd/falco-kmod-inject.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/systemd/falco-kmod-inject.service -------------------------------------------------------------------------------- /scripts/systemd/falco-kmod.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/systemd/falco-kmod.service -------------------------------------------------------------------------------- /scripts/systemd/falco-modern-bpf.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/systemd/falco-modern-bpf.service -------------------------------------------------------------------------------- /scripts/systemd/falcoctl-artifact-follow.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/scripts/systemd/falcoctl-artifact-follow.service -------------------------------------------------------------------------------- /semgrep/insecure-api-gets.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/semgrep/insecure-api-gets.yaml -------------------------------------------------------------------------------- /semgrep/insecure-api-sprintf-vsprintf.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/semgrep/insecure-api-sprintf-vsprintf.yaml -------------------------------------------------------------------------------- /semgrep/insecure-api-strcpy-stpcpy-strcat.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/semgrep/insecure-api-strcpy-stpcpy-strcat.yaml -------------------------------------------------------------------------------- /semgrep/insecure-api-strn.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/semgrep/insecure-api-strn.yaml -------------------------------------------------------------------------------- /tools/local_hooks/dco-pre-commit-msg.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/tools/local_hooks/dco-pre-commit-msg.sh -------------------------------------------------------------------------------- /unit_tests/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/CMakeLists.txt -------------------------------------------------------------------------------- /unit_tests/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/README.md -------------------------------------------------------------------------------- /unit_tests/engine/test_add_source.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_add_source.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_alt_rule_loader.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_alt_rule_loader.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_enable_rule.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_enable_rule.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_extra_output.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_extra_output.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_falco_utils.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_falco_utils.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_filter_details_resolver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_filter_details_resolver.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_filter_macro_resolver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_filter_macro_resolver.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_filter_warning_resolver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_filter_warning_resolver.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_plugin_requirements.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_plugin_requirements.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_rule_loader.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_rule_loader.cpp -------------------------------------------------------------------------------- /unit_tests/engine/test_rulesets.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/engine/test_rulesets.cpp -------------------------------------------------------------------------------- /unit_tests/falco/app/actions/app_action_helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/app/actions/app_action_helpers.h -------------------------------------------------------------------------------- /unit_tests/falco/app/actions/test_configure_interesting_sets.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/app/actions/test_configure_interesting_sets.cpp -------------------------------------------------------------------------------- /unit_tests/falco/app/actions/test_configure_syscall_buffer_num.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/app/actions/test_configure_syscall_buffer_num.cpp -------------------------------------------------------------------------------- /unit_tests/falco/app/actions/test_load_config.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/app/actions/test_load_config.cpp -------------------------------------------------------------------------------- /unit_tests/falco/app/actions/test_select_event_sources.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/app/actions/test_select_event_sources.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_atomic_signal_handler.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_atomic_signal_handler.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_capture.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_capture.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_configs/engine_kmod_config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configs/engine_kmod_config.yaml -------------------------------------------------------------------------------- /unit_tests/falco/test_configs/engine_modern_config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configs/engine_modern_config.yaml -------------------------------------------------------------------------------- /unit_tests/falco/test_configuration.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configuration.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_configuration_config_files.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configuration_config_files.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_configuration_env_vars.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configuration_env_vars.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_configuration_output_options.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configuration_output_options.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_configuration_rule_selection.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configuration_rule_selection.cpp -------------------------------------------------------------------------------- /unit_tests/falco/test_configuration_schema.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco/test_configuration_schema.cpp -------------------------------------------------------------------------------- /unit_tests/falco_test_var.h.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/falco_test_var.h.in -------------------------------------------------------------------------------- /unit_tests/test_falco_engine.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/test_falco_engine.cpp -------------------------------------------------------------------------------- /unit_tests/test_falco_engine.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/unit_tests/test_falco_engine.h -------------------------------------------------------------------------------- /userspace/engine/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/CMakeLists.txt -------------------------------------------------------------------------------- /userspace/engine/OWNERS: -------------------------------------------------------------------------------- 1 | labels: 2 | - area/engine -------------------------------------------------------------------------------- /userspace/engine/evttype_index_ruleset.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/evttype_index_ruleset.cpp -------------------------------------------------------------------------------- /userspace/engine/evttype_index_ruleset.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/evttype_index_ruleset.h -------------------------------------------------------------------------------- /userspace/engine/falco_common.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_common.cpp -------------------------------------------------------------------------------- /userspace/engine/falco_common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_common.h -------------------------------------------------------------------------------- /userspace/engine/falco_engine.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_engine.cpp -------------------------------------------------------------------------------- /userspace/engine/falco_engine.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_engine.h -------------------------------------------------------------------------------- /userspace/engine/falco_engine_version.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_engine_version.h -------------------------------------------------------------------------------- /userspace/engine/falco_load_result.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_load_result.cpp -------------------------------------------------------------------------------- /userspace/engine/falco_load_result.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_load_result.h -------------------------------------------------------------------------------- /userspace/engine/falco_rule.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_rule.h -------------------------------------------------------------------------------- /userspace/engine/falco_source.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_source.h -------------------------------------------------------------------------------- /userspace/engine/falco_utils.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_utils.cpp -------------------------------------------------------------------------------- /userspace/engine/falco_utils.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/falco_utils.h -------------------------------------------------------------------------------- /userspace/engine/filter_details_resolver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_details_resolver.cpp -------------------------------------------------------------------------------- /userspace/engine/filter_details_resolver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_details_resolver.h -------------------------------------------------------------------------------- /userspace/engine/filter_macro_resolver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_macro_resolver.cpp -------------------------------------------------------------------------------- /userspace/engine/filter_macro_resolver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_macro_resolver.h -------------------------------------------------------------------------------- /userspace/engine/filter_ruleset.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_ruleset.cpp -------------------------------------------------------------------------------- /userspace/engine/filter_ruleset.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_ruleset.h -------------------------------------------------------------------------------- /userspace/engine/filter_warning_resolver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_warning_resolver.cpp -------------------------------------------------------------------------------- /userspace/engine/filter_warning_resolver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/filter_warning_resolver.h -------------------------------------------------------------------------------- /userspace/engine/formats.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/formats.cpp -------------------------------------------------------------------------------- /userspace/engine/formats.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/formats.h -------------------------------------------------------------------------------- /userspace/engine/indexable_ruleset.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/indexable_ruleset.h -------------------------------------------------------------------------------- /userspace/engine/indexed_vector.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/indexed_vector.h -------------------------------------------------------------------------------- /userspace/engine/logger.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/logger.cpp -------------------------------------------------------------------------------- /userspace/engine/logger.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/logger.h -------------------------------------------------------------------------------- /userspace/engine/rule_json_schema.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_json_schema.h -------------------------------------------------------------------------------- /userspace/engine/rule_loader.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader.cpp -------------------------------------------------------------------------------- /userspace/engine/rule_loader.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader.h -------------------------------------------------------------------------------- /userspace/engine/rule_loader_collector.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader_collector.cpp -------------------------------------------------------------------------------- /userspace/engine/rule_loader_collector.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader_collector.h -------------------------------------------------------------------------------- /userspace/engine/rule_loader_compile_output.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader_compile_output.h -------------------------------------------------------------------------------- /userspace/engine/rule_loader_compiler.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader_compiler.cpp -------------------------------------------------------------------------------- /userspace/engine/rule_loader_compiler.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader_compiler.h -------------------------------------------------------------------------------- /userspace/engine/rule_loader_reader.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader_reader.cpp -------------------------------------------------------------------------------- /userspace/engine/rule_loader_reader.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loader_reader.h -------------------------------------------------------------------------------- /userspace/engine/rule_loading_messages.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/rule_loading_messages.h -------------------------------------------------------------------------------- /userspace/engine/stats_manager.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/stats_manager.cpp -------------------------------------------------------------------------------- /userspace/engine/stats_manager.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/stats_manager.h -------------------------------------------------------------------------------- /userspace/engine/yaml_helper.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/engine/yaml_helper.h -------------------------------------------------------------------------------- /userspace/falco/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/CMakeLists.txt -------------------------------------------------------------------------------- /userspace/falco/app/actions/actions.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/actions.h -------------------------------------------------------------------------------- /userspace/falco/app/actions/close_inspectors.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/close_inspectors.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/configure_interesting_sets.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/configure_interesting_sets.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/configure_syscall_buffer_num.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/configure_syscall_buffer_num.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/configure_syscall_buffer_size.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/configure_syscall_buffer_size.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/create_requested_paths.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/create_requested_paths.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/create_signal_handlers.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/create_signal_handlers.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/helpers.h -------------------------------------------------------------------------------- /userspace/falco/app/actions/helpers_generic.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/helpers_generic.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/helpers_inspector.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/helpers_inspector.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/init_falco_engine.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/init_falco_engine.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/init_inspectors.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/init_inspectors.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/init_outputs.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/init_outputs.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/list_fields.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/list_fields.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/list_plugins.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/list_plugins.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/load_config.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/load_config.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/load_plugins.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/load_plugins.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/load_rules_files.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/load_rules_files.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/pidfile.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/pidfile.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_config_schema.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_config_schema.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_generated_gvisor_config.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_generated_gvisor_config.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_help.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_help.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_ignored_events.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_ignored_events.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_kernel_version.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_kernel_version.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_page_size.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_page_size.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_plugin_info.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_plugin_info.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_rule_schema.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_rule_schema.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_support.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_support.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_syscall_events.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_syscall_events.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/print_version.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/print_version.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/process_events.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/process_events.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/select_event_sources.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/select_event_sources.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/start_grpc_server.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/start_grpc_server.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/start_webserver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/start_webserver.cpp -------------------------------------------------------------------------------- /userspace/falco/app/actions/validate_rules_files.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/actions/validate_rules_files.cpp -------------------------------------------------------------------------------- /userspace/falco/app/app.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/app.cpp -------------------------------------------------------------------------------- /userspace/falco/app/app.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/app.h -------------------------------------------------------------------------------- /userspace/falco/app/options.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/options.cpp -------------------------------------------------------------------------------- /userspace/falco/app/options.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/options.h -------------------------------------------------------------------------------- /userspace/falco/app/restart_handler.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/restart_handler.cpp -------------------------------------------------------------------------------- /userspace/falco/app/restart_handler.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/restart_handler.h -------------------------------------------------------------------------------- /userspace/falco/app/run_result.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/run_result.h -------------------------------------------------------------------------------- /userspace/falco/app/signals.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/signals.h -------------------------------------------------------------------------------- /userspace/falco/app/state.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/app/state.h -------------------------------------------------------------------------------- /userspace/falco/atomic_signal_handler.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/atomic_signal_handler.h -------------------------------------------------------------------------------- /userspace/falco/config_falco.h.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/config_falco.h.in -------------------------------------------------------------------------------- /userspace/falco/config_json_schema.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/config_json_schema.h -------------------------------------------------------------------------------- /userspace/falco/configuration.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/configuration.cpp -------------------------------------------------------------------------------- /userspace/falco/configuration.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/configuration.h -------------------------------------------------------------------------------- /userspace/falco/event_drops.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/event_drops.cpp -------------------------------------------------------------------------------- /userspace/falco/event_drops.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/event_drops.h -------------------------------------------------------------------------------- /userspace/falco/falco.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/falco.cpp -------------------------------------------------------------------------------- /userspace/falco/falco_metrics.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/falco_metrics.cpp -------------------------------------------------------------------------------- /userspace/falco/falco_metrics.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/falco_metrics.h -------------------------------------------------------------------------------- /userspace/falco/falco_outputs.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/falco_outputs.cpp -------------------------------------------------------------------------------- /userspace/falco/falco_outputs.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/falco_outputs.h -------------------------------------------------------------------------------- /userspace/falco/falco_semaphore.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/falco_semaphore.h -------------------------------------------------------------------------------- /userspace/falco/grpc_context.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/grpc_context.cpp -------------------------------------------------------------------------------- /userspace/falco/grpc_context.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/grpc_context.h -------------------------------------------------------------------------------- /userspace/falco/grpc_queue.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/grpc_queue.h -------------------------------------------------------------------------------- /userspace/falco/grpc_request_context.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/grpc_request_context.cpp -------------------------------------------------------------------------------- /userspace/falco/grpc_request_context.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/grpc_request_context.h -------------------------------------------------------------------------------- /userspace/falco/grpc_server.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/grpc_server.cpp -------------------------------------------------------------------------------- /userspace/falco/grpc_server.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/grpc_server.h -------------------------------------------------------------------------------- /userspace/falco/outputs.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs.h -------------------------------------------------------------------------------- /userspace/falco/outputs.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs.proto -------------------------------------------------------------------------------- /userspace/falco/outputs_file.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_file.cpp -------------------------------------------------------------------------------- /userspace/falco/outputs_file.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_file.h -------------------------------------------------------------------------------- /userspace/falco/outputs_grpc.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_grpc.cpp -------------------------------------------------------------------------------- /userspace/falco/outputs_grpc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_grpc.h -------------------------------------------------------------------------------- /userspace/falco/outputs_http.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_http.cpp -------------------------------------------------------------------------------- /userspace/falco/outputs_http.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_http.h -------------------------------------------------------------------------------- /userspace/falco/outputs_program.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_program.cpp -------------------------------------------------------------------------------- /userspace/falco/outputs_program.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_program.h -------------------------------------------------------------------------------- /userspace/falco/outputs_stdout.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_stdout.cpp -------------------------------------------------------------------------------- /userspace/falco/outputs_stdout.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_stdout.h -------------------------------------------------------------------------------- /userspace/falco/outputs_syslog.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_syslog.cpp -------------------------------------------------------------------------------- /userspace/falco/outputs_syslog.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/outputs_syslog.h -------------------------------------------------------------------------------- /userspace/falco/schema.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/schema.proto -------------------------------------------------------------------------------- /userspace/falco/stats_writer.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/stats_writer.cpp -------------------------------------------------------------------------------- /userspace/falco/stats_writer.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/stats_writer.h -------------------------------------------------------------------------------- /userspace/falco/version.proto: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/version.proto -------------------------------------------------------------------------------- /userspace/falco/versions_info.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/versions_info.cpp -------------------------------------------------------------------------------- /userspace/falco/versions_info.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/versions_info.h -------------------------------------------------------------------------------- /userspace/falco/watchdog.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/watchdog.h -------------------------------------------------------------------------------- /userspace/falco/webserver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/webserver.cpp -------------------------------------------------------------------------------- /userspace/falco/webserver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/falco/HEAD/userspace/falco/webserver.h --------------------------------------------------------------------------------