├── .github ├── PULL_REQUEST_TEMPLATE.md └── workflows │ ├── docs.yaml │ └── pr.yaml ├── .gitignore ├── Cargo.lock ├── Cargo.toml ├── LICENSE ├── OWNERS ├── README.md ├── falco_event ├── Cargo.toml ├── README.md └── src │ ├── events │ ├── event.rs │ ├── metadata.rs │ ├── mod.rs │ ├── payload.rs │ ├── raw_event.rs │ └── to_bytes.rs │ ├── fields │ ├── from_bytes.rs │ ├── mod.rs │ └── to_bytes.rs │ ├── lib.rs │ └── types │ ├── bytebuf.rs │ ├── format │ ├── bytebuf.rs │ ├── cstr.rs │ ├── mod.rs │ └── option.rs │ ├── mod.rs │ ├── net │ ├── endpoint.rs │ ├── ipaddr.rs │ ├── ipnet.rs │ ├── ipv4addr.rs │ ├── ipv4net.rs │ ├── ipv6addr.rs │ ├── ipv6net.rs │ └── mod.rs │ ├── path │ ├── absolute_path.rs │ ├── mod.rs │ └── relative_path.rs │ ├── primitive │ ├── bool.rs │ ├── integers.rs │ ├── mod.rs │ └── newtypes.rs │ ├── string │ ├── cstr.rs │ ├── cstr_array.rs │ ├── cstr_pair_array.rs │ └── mod.rs │ └── time │ ├── duration.rs │ ├── mod.rs │ └── system_time.rs ├── falco_event_derive ├── .gitignore ├── Cargo.toml ├── README.md └── src │ ├── any_event.rs │ ├── binary_payload.rs │ ├── helpers.rs │ └── lib.rs ├── falco_event_schema ├── Cargo.toml ├── README.md ├── api │ ├── SCHEMA_VERSION │ ├── dynamic_params_table.c │ ├── event_table.c │ ├── feature_gates.h │ ├── flag_types │ ├── flags_table.c │ ├── ppm_events_public.h │ └── ppm_fillers.h ├── src │ ├── events.rs │ ├── ffi.rs │ ├── fields │ │ ├── dynamic_params.rs │ │ ├── event_flags.rs │ │ ├── mod.rs │ │ └── types.rs │ ├── lib.rs │ ├── tests.rs │ └── types │ │ ├── fd_list.rs │ │ ├── mod.rs │ │ └── net │ │ ├── mod.rs │ │ ├── sockaddr.rs │ │ └── socktuple.rs └── tools │ ├── generate_dynamic_param_table.sh │ ├── generate_event_table.sh │ └── generate_flags_table.sh ├── falco_event_serde ├── Cargo.toml ├── src │ ├── de │ │ ├── events.rs │ │ ├── mod.rs │ │ ├── payload.rs │ │ └── repr │ │ │ ├── dynamic_params.rs │ │ │ ├── fd_list.rs │ │ │ ├── flags.rs │ │ │ ├── integers.rs │ │ │ ├── mod.rs │ │ │ ├── net.rs │ │ │ ├── newtypes.rs │ │ │ ├── strings.rs │ │ │ └── time.rs │ ├── lib.rs │ └── ser │ │ ├── field │ │ ├── dynamic_params.rs │ │ ├── fd_list.rs │ │ ├── flags.rs │ │ ├── integers.rs │ │ ├── mod.rs │ │ ├── net.rs │ │ ├── newtypes.rs │ │ ├── option.rs │ │ ├── strings.rs │ │ └── time.rs │ │ ├── mod.rs │ │ └── payload.rs └── tests │ ├── basic.rs │ ├── dynamic_params.rs │ ├── fd_list.rs │ ├── flags.rs │ ├── sockaddr.rs │ ├── socktuple.rs │ └── strings.rs ├── falco_plugin ├── .gitignore ├── Cargo.toml ├── README.md ├── examples │ └── dummy_source.rs └── src │ ├── async_event │ ├── async_handler.rs │ ├── background_task.rs │ ├── mod.rs │ └── wrappers.rs │ ├── base │ ├── logger.rs │ ├── metrics.rs │ ├── mod.rs │ ├── schema.rs │ └── wrappers.rs │ ├── error │ ├── as_result.rs │ ├── ffi_result.rs │ ├── last_error.rs │ └── mod.rs │ ├── event │ ├── async_event.rs │ ├── event_input.rs │ ├── json.rs │ ├── mod.rs │ └── plugin_event.rs │ ├── extract │ ├── extractor_fn.rs │ ├── fields.rs │ ├── mod.rs │ ├── schema.rs │ └── wrappers.rs │ ├── lib.rs │ ├── listen │ ├── mod.rs │ ├── routine.rs │ └── wrappers.rs │ ├── parse │ ├── mod.rs │ └── wrappers.rs │ ├── source │ ├── event_batch.rs │ ├── mod.rs │ ├── open_params.rs │ └── wrappers.rs │ ├── strings │ ├── cstring_writer.rs │ ├── from_ptr.rs │ └── mod.rs │ └── tables │ ├── data.rs │ ├── export │ ├── entry │ │ ├── dynamic.rs │ │ ├── extensible.rs │ │ ├── mod.rs │ │ ├── table_metadata │ │ │ ├── dynamic.rs │ │ │ ├── extensible.rs │ │ │ ├── mod.rs │ │ │ └── traits.rs │ │ └── traits.rs │ ├── field │ │ ├── mod.rs │ │ ├── private.rs │ │ ├── public.rs │ │ ├── readonly.rs │ │ └── table.rs │ ├── field_descriptor.rs │ ├── field_value │ │ ├── dynamic.rs │ │ ├── mod.rs │ │ ├── scalar.rs │ │ ├── table.rs │ │ └── traits.rs │ ├── macros.rs │ ├── metadata.rs │ ├── mod.rs │ ├── ref_shared.rs │ ├── static_field_specialization.rs │ ├── table.rs │ ├── tables_input.rs │ ├── vtable.rs │ └── wrappers.rs │ ├── import │ ├── entry │ │ ├── mod.rs │ │ └── raw.rs │ ├── field │ │ ├── mod.rs │ │ └── raw.rs │ ├── macros.rs │ ├── mod.rs │ ├── runtime.rs │ ├── runtime_table_validator.rs │ ├── table │ │ ├── mod.rs │ │ └── raw.rs │ ├── table_input.rs │ └── traits │ │ └── mod.rs │ ├── mod.rs │ └── vtable │ ├── fields.rs │ ├── mod.rs │ ├── reader.rs │ └── writer.rs ├── falco_plugin_api ├── Cargo.toml ├── README.md ├── plugin │ ├── SCHEMA_VERSION │ ├── plugin_api.h │ └── plugin_types.h └── src │ ├── ffi.rs │ └── lib.rs ├── falco_plugin_derive ├── Cargo.toml ├── README.md └── src │ └── lib.rs ├── falco_plugin_runner ├── Cargo.toml └── src │ ├── event.rs │ ├── lib.rs │ ├── plugin │ ├── async_event.rs │ ├── event_source_filter.rs │ ├── extract.rs │ ├── listen.rs │ ├── mod.rs │ ├── parse.rs │ └── source.rs │ └── tables.rs ├── falco_plugin_tests ├── Cargo.toml ├── benches │ ├── binary_event.rs │ ├── binary_event_all.rs │ ├── plugin_custom_tables.rs │ ├── plugin_extract_static.rs │ ├── plugin_source_batch.rs │ ├── plugin_source_parse_noop.rs │ └── plugin_threadinfo.rs ├── build.rs ├── c++ │ ├── sinsp_test_driver.cpp │ └── sinsp_test_driver.h ├── src │ ├── bin │ │ └── dump_raw_events.rs │ ├── common.rs │ ├── ffi.rs │ ├── lib.rs │ ├── native.rs │ └── plugin_collection │ │ ├── events │ │ ├── countdown.rs │ │ └── mod.rs │ │ ├── extract │ │ ├── extra_fields.rs │ │ ├── mod.rs │ │ ├── nested.rs │ │ ├── remaining_from_payload.rs │ │ ├── remaining_from_table.rs │ │ └── remaining_from_table_runtime.rs │ │ ├── mod.rs │ │ ├── parse │ │ ├── extra_fields.rs │ │ ├── mod.rs │ │ ├── nested_table_extra_fields.rs │ │ ├── remaining_into_nested_table.rs │ │ ├── remaining_into_table_api.rs │ │ └── remaining_into_table_direct.rs │ │ ├── source │ │ ├── batched_empty_event.rs │ │ ├── countdown.rs │ │ └── mod.rs │ │ └── tables │ │ ├── mod.rs │ │ ├── remaining_export.rs │ │ ├── remaining_import.rs │ │ └── remaining_import_extra_fields.rs └── tests │ ├── async.rs │ ├── async_tables.rs │ ├── capture_listen_resched.rs │ ├── capture_listen_run_forever.rs │ ├── dummy.rs │ ├── dummy_source.rs │ ├── dummy_source_fail.rs │ ├── dummy_source_json.rs │ ├── dummy_syscall_source.rs │ ├── extract.rs │ ├── extract_range.rs │ ├── extract_types.rs │ ├── parse.rs │ ├── parse_runtime.rs │ ├── parse_table_api.rs │ ├── parse_table_nested.rs │ ├── scap.rs │ ├── scap │ ├── kexec_x86.raw │ └── kexec_x86.scap │ ├── scap_import_table.rs │ ├── scap_import_table_bad_key_type.rs │ ├── source_batch.rs │ └── source_single.rs ├── falco_schema_derive ├── Cargo.toml ├── README.md └── src │ ├── dynamic_params.rs │ ├── event_flags.rs │ ├── event_info.rs │ ├── format.rs │ └── lib.rs └── justfile /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/.github/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /.github/workflows/docs.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/.github/workflows/docs.yaml -------------------------------------------------------------------------------- /.github/workflows/pr.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/.github/workflows/pr.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | .idea 2 | target 3 | htmlReport 4 | -------------------------------------------------------------------------------- /Cargo.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/Cargo.lock -------------------------------------------------------------------------------- /Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/Cargo.toml -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/LICENSE -------------------------------------------------------------------------------- /OWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/OWNERS -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/README.md -------------------------------------------------------------------------------- /falco_event/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/Cargo.toml -------------------------------------------------------------------------------- /falco_event/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/README.md -------------------------------------------------------------------------------- /falco_event/src/events/event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/events/event.rs -------------------------------------------------------------------------------- /falco_event/src/events/metadata.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/events/metadata.rs -------------------------------------------------------------------------------- /falco_event/src/events/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/events/mod.rs -------------------------------------------------------------------------------- /falco_event/src/events/payload.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/events/payload.rs -------------------------------------------------------------------------------- /falco_event/src/events/raw_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/events/raw_event.rs -------------------------------------------------------------------------------- /falco_event/src/events/to_bytes.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/events/to_bytes.rs -------------------------------------------------------------------------------- /falco_event/src/fields/from_bytes.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/fields/from_bytes.rs -------------------------------------------------------------------------------- /falco_event/src/fields/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/fields/mod.rs -------------------------------------------------------------------------------- /falco_event/src/fields/to_bytes.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/fields/to_bytes.rs -------------------------------------------------------------------------------- /falco_event/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/lib.rs -------------------------------------------------------------------------------- /falco_event/src/types/bytebuf.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/bytebuf.rs -------------------------------------------------------------------------------- /falco_event/src/types/format/bytebuf.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/format/bytebuf.rs -------------------------------------------------------------------------------- /falco_event/src/types/format/cstr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/format/cstr.rs -------------------------------------------------------------------------------- /falco_event/src/types/format/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/format/mod.rs -------------------------------------------------------------------------------- /falco_event/src/types/format/option.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/format/option.rs -------------------------------------------------------------------------------- /falco_event/src/types/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/mod.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/endpoint.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/endpoint.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/ipaddr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/ipaddr.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/ipnet.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/ipnet.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/ipv4addr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/ipv4addr.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/ipv4net.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/ipv4net.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/ipv6addr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/ipv6addr.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/ipv6net.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/ipv6net.rs -------------------------------------------------------------------------------- /falco_event/src/types/net/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/net/mod.rs -------------------------------------------------------------------------------- /falco_event/src/types/path/absolute_path.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/path/absolute_path.rs -------------------------------------------------------------------------------- /falco_event/src/types/path/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/path/mod.rs -------------------------------------------------------------------------------- /falco_event/src/types/path/relative_path.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/path/relative_path.rs -------------------------------------------------------------------------------- /falco_event/src/types/primitive/bool.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/primitive/bool.rs -------------------------------------------------------------------------------- /falco_event/src/types/primitive/integers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/primitive/integers.rs -------------------------------------------------------------------------------- /falco_event/src/types/primitive/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/primitive/mod.rs -------------------------------------------------------------------------------- /falco_event/src/types/primitive/newtypes.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/primitive/newtypes.rs -------------------------------------------------------------------------------- /falco_event/src/types/string/cstr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/string/cstr.rs -------------------------------------------------------------------------------- /falco_event/src/types/string/cstr_array.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/string/cstr_array.rs -------------------------------------------------------------------------------- /falco_event/src/types/string/cstr_pair_array.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/string/cstr_pair_array.rs -------------------------------------------------------------------------------- /falco_event/src/types/string/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/string/mod.rs -------------------------------------------------------------------------------- /falco_event/src/types/time/duration.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/time/duration.rs -------------------------------------------------------------------------------- /falco_event/src/types/time/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/time/mod.rs -------------------------------------------------------------------------------- /falco_event/src/types/time/system_time.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event/src/types/time/system_time.rs -------------------------------------------------------------------------------- /falco_event_derive/.gitignore: -------------------------------------------------------------------------------- 1 | /target 2 | **/*.rs.bk 3 | Cargo.lock 4 | -------------------------------------------------------------------------------- /falco_event_derive/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_derive/Cargo.toml -------------------------------------------------------------------------------- /falco_event_derive/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_derive/README.md -------------------------------------------------------------------------------- /falco_event_derive/src/any_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_derive/src/any_event.rs -------------------------------------------------------------------------------- /falco_event_derive/src/binary_payload.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_derive/src/binary_payload.rs -------------------------------------------------------------------------------- /falco_event_derive/src/helpers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_derive/src/helpers.rs -------------------------------------------------------------------------------- /falco_event_derive/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_derive/src/lib.rs -------------------------------------------------------------------------------- /falco_event_schema/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/Cargo.toml -------------------------------------------------------------------------------- /falco_event_schema/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/README.md -------------------------------------------------------------------------------- /falco_event_schema/api/SCHEMA_VERSION: -------------------------------------------------------------------------------- 1 | 4.0.1 2 | -------------------------------------------------------------------------------- /falco_event_schema/api/dynamic_params_table.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/api/dynamic_params_table.c -------------------------------------------------------------------------------- /falco_event_schema/api/event_table.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/api/event_table.c -------------------------------------------------------------------------------- /falco_event_schema/api/feature_gates.h: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /falco_event_schema/api/flag_types: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/api/flag_types -------------------------------------------------------------------------------- /falco_event_schema/api/flags_table.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/api/flags_table.c -------------------------------------------------------------------------------- /falco_event_schema/api/ppm_events_public.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/api/ppm_events_public.h -------------------------------------------------------------------------------- /falco_event_schema/api/ppm_fillers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/api/ppm_fillers.h -------------------------------------------------------------------------------- /falco_event_schema/src/events.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/events.rs -------------------------------------------------------------------------------- /falco_event_schema/src/ffi.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/ffi.rs -------------------------------------------------------------------------------- /falco_event_schema/src/fields/dynamic_params.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/fields/dynamic_params.rs -------------------------------------------------------------------------------- /falco_event_schema/src/fields/event_flags.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/fields/event_flags.rs -------------------------------------------------------------------------------- /falco_event_schema/src/fields/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/fields/mod.rs -------------------------------------------------------------------------------- /falco_event_schema/src/fields/types.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/fields/types.rs -------------------------------------------------------------------------------- /falco_event_schema/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/lib.rs -------------------------------------------------------------------------------- /falco_event_schema/src/tests.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/tests.rs -------------------------------------------------------------------------------- /falco_event_schema/src/types/fd_list.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/types/fd_list.rs -------------------------------------------------------------------------------- /falco_event_schema/src/types/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/types/mod.rs -------------------------------------------------------------------------------- /falco_event_schema/src/types/net/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/types/net/mod.rs -------------------------------------------------------------------------------- /falco_event_schema/src/types/net/sockaddr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/types/net/sockaddr.rs -------------------------------------------------------------------------------- /falco_event_schema/src/types/net/socktuple.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/src/types/net/socktuple.rs -------------------------------------------------------------------------------- /falco_event_schema/tools/generate_dynamic_param_table.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/tools/generate_dynamic_param_table.sh -------------------------------------------------------------------------------- /falco_event_schema/tools/generate_event_table.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/tools/generate_event_table.sh -------------------------------------------------------------------------------- /falco_event_schema/tools/generate_flags_table.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_schema/tools/generate_flags_table.sh -------------------------------------------------------------------------------- /falco_event_serde/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/Cargo.toml -------------------------------------------------------------------------------- /falco_event_serde/src/de/events.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/events.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/mod.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/payload.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/payload.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/dynamic_params.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/dynamic_params.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/fd_list.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/fd_list.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/flags.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/flags.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/integers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/integers.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/mod.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/net.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/net.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/newtypes.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/newtypes.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/strings.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/strings.rs -------------------------------------------------------------------------------- /falco_event_serde/src/de/repr/time.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/de/repr/time.rs -------------------------------------------------------------------------------- /falco_event_serde/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/lib.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/dynamic_params.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/dynamic_params.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/fd_list.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/fd_list.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/flags.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/flags.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/integers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/integers.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/mod.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/net.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/net.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/newtypes.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/newtypes.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/option.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/option.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/strings.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/strings.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/field/time.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/field/time.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/mod.rs -------------------------------------------------------------------------------- /falco_event_serde/src/ser/payload.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/src/ser/payload.rs -------------------------------------------------------------------------------- /falco_event_serde/tests/basic.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/tests/basic.rs -------------------------------------------------------------------------------- /falco_event_serde/tests/dynamic_params.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/tests/dynamic_params.rs -------------------------------------------------------------------------------- /falco_event_serde/tests/fd_list.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/tests/fd_list.rs -------------------------------------------------------------------------------- /falco_event_serde/tests/flags.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/tests/flags.rs -------------------------------------------------------------------------------- /falco_event_serde/tests/sockaddr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/tests/sockaddr.rs -------------------------------------------------------------------------------- /falco_event_serde/tests/socktuple.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/tests/socktuple.rs -------------------------------------------------------------------------------- /falco_event_serde/tests/strings.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_event_serde/tests/strings.rs -------------------------------------------------------------------------------- /falco_plugin/.gitignore: -------------------------------------------------------------------------------- 1 | /target 2 | -------------------------------------------------------------------------------- /falco_plugin/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/Cargo.toml -------------------------------------------------------------------------------- /falco_plugin/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/README.md -------------------------------------------------------------------------------- /falco_plugin/examples/dummy_source.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/examples/dummy_source.rs -------------------------------------------------------------------------------- /falco_plugin/src/async_event/async_handler.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/async_event/async_handler.rs -------------------------------------------------------------------------------- /falco_plugin/src/async_event/background_task.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/async_event/background_task.rs -------------------------------------------------------------------------------- /falco_plugin/src/async_event/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/async_event/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/async_event/wrappers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/async_event/wrappers.rs -------------------------------------------------------------------------------- /falco_plugin/src/base/logger.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/base/logger.rs -------------------------------------------------------------------------------- /falco_plugin/src/base/metrics.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/base/metrics.rs -------------------------------------------------------------------------------- /falco_plugin/src/base/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/base/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/base/schema.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/base/schema.rs -------------------------------------------------------------------------------- /falco_plugin/src/base/wrappers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/base/wrappers.rs -------------------------------------------------------------------------------- /falco_plugin/src/error/as_result.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/error/as_result.rs -------------------------------------------------------------------------------- /falco_plugin/src/error/ffi_result.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/error/ffi_result.rs -------------------------------------------------------------------------------- /falco_plugin/src/error/last_error.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/error/last_error.rs -------------------------------------------------------------------------------- /falco_plugin/src/error/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/error/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/event/async_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/event/async_event.rs -------------------------------------------------------------------------------- /falco_plugin/src/event/event_input.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/event/event_input.rs -------------------------------------------------------------------------------- /falco_plugin/src/event/json.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/event/json.rs -------------------------------------------------------------------------------- /falco_plugin/src/event/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/event/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/event/plugin_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/event/plugin_event.rs -------------------------------------------------------------------------------- /falco_plugin/src/extract/extractor_fn.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/extract/extractor_fn.rs -------------------------------------------------------------------------------- /falco_plugin/src/extract/fields.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/extract/fields.rs -------------------------------------------------------------------------------- /falco_plugin/src/extract/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/extract/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/extract/schema.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/extract/schema.rs -------------------------------------------------------------------------------- /falco_plugin/src/extract/wrappers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/extract/wrappers.rs -------------------------------------------------------------------------------- /falco_plugin/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/lib.rs -------------------------------------------------------------------------------- /falco_plugin/src/listen/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/listen/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/listen/routine.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/listen/routine.rs -------------------------------------------------------------------------------- /falco_plugin/src/listen/wrappers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/listen/wrappers.rs -------------------------------------------------------------------------------- /falco_plugin/src/parse/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/parse/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/parse/wrappers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/parse/wrappers.rs -------------------------------------------------------------------------------- /falco_plugin/src/source/event_batch.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/source/event_batch.rs -------------------------------------------------------------------------------- /falco_plugin/src/source/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/source/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/source/open_params.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/source/open_params.rs -------------------------------------------------------------------------------- /falco_plugin/src/source/wrappers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/source/wrappers.rs -------------------------------------------------------------------------------- /falco_plugin/src/strings/cstring_writer.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/strings/cstring_writer.rs -------------------------------------------------------------------------------- /falco_plugin/src/strings/from_ptr.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/strings/from_ptr.rs -------------------------------------------------------------------------------- /falco_plugin/src/strings/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/strings/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/data.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/data.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/dynamic.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/dynamic.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/extensible.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/extensible.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/table_metadata/dynamic.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/table_metadata/dynamic.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/table_metadata/extensible.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/table_metadata/extensible.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/table_metadata/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/table_metadata/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/table_metadata/traits.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/table_metadata/traits.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/entry/traits.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/entry/traits.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field/private.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field/private.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field/public.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field/public.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field/readonly.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field/readonly.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field/table.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field/table.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field_descriptor.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field_descriptor.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field_value/dynamic.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field_value/dynamic.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field_value/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field_value/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field_value/scalar.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field_value/scalar.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field_value/table.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field_value/table.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/field_value/traits.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/field_value/traits.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/macros.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/macros.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/metadata.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/metadata.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/ref_shared.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/ref_shared.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/static_field_specialization.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/static_field_specialization.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/table.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/table.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/tables_input.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/tables_input.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/vtable.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/vtable.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/export/wrappers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/export/wrappers.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/entry/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/entry/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/entry/raw.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/entry/raw.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/field/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/field/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/field/raw.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/field/raw.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/macros.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/macros.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/runtime.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/runtime.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/runtime_table_validator.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/runtime_table_validator.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/table/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/table/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/table/raw.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/table/raw.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/table_input.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/table_input.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/import/traits/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/import/traits/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/vtable/fields.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/vtable/fields.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/vtable/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/vtable/mod.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/vtable/reader.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/vtable/reader.rs -------------------------------------------------------------------------------- /falco_plugin/src/tables/vtable/writer.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin/src/tables/vtable/writer.rs -------------------------------------------------------------------------------- /falco_plugin_api/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_api/Cargo.toml -------------------------------------------------------------------------------- /falco_plugin_api/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_api/README.md -------------------------------------------------------------------------------- /falco_plugin_api/plugin/SCHEMA_VERSION: -------------------------------------------------------------------------------- 1 | 4.0.1 2 | -------------------------------------------------------------------------------- /falco_plugin_api/plugin/plugin_api.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_api/plugin/plugin_api.h -------------------------------------------------------------------------------- /falco_plugin_api/plugin/plugin_types.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_api/plugin/plugin_types.h -------------------------------------------------------------------------------- /falco_plugin_api/src/ffi.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_api/src/ffi.rs -------------------------------------------------------------------------------- /falco_plugin_api/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_api/src/lib.rs -------------------------------------------------------------------------------- /falco_plugin_derive/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_derive/Cargo.toml -------------------------------------------------------------------------------- /falco_plugin_derive/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_derive/README.md -------------------------------------------------------------------------------- /falco_plugin_derive/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_derive/src/lib.rs -------------------------------------------------------------------------------- /falco_plugin_runner/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/Cargo.toml -------------------------------------------------------------------------------- /falco_plugin_runner/src/event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/event.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/lib.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/plugin/async_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/plugin/async_event.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/plugin/event_source_filter.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/plugin/event_source_filter.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/plugin/extract.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/plugin/extract.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/plugin/listen.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/plugin/listen.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/plugin/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/plugin/mod.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/plugin/parse.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/plugin/parse.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/plugin/source.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/plugin/source.rs -------------------------------------------------------------------------------- /falco_plugin_runner/src/tables.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_runner/src/tables.rs -------------------------------------------------------------------------------- /falco_plugin_tests/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/Cargo.toml -------------------------------------------------------------------------------- /falco_plugin_tests/benches/binary_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/benches/binary_event.rs -------------------------------------------------------------------------------- /falco_plugin_tests/benches/binary_event_all.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/benches/binary_event_all.rs -------------------------------------------------------------------------------- /falco_plugin_tests/benches/plugin_custom_tables.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/benches/plugin_custom_tables.rs -------------------------------------------------------------------------------- /falco_plugin_tests/benches/plugin_extract_static.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/benches/plugin_extract_static.rs -------------------------------------------------------------------------------- /falco_plugin_tests/benches/plugin_source_batch.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/benches/plugin_source_batch.rs -------------------------------------------------------------------------------- /falco_plugin_tests/benches/plugin_source_parse_noop.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/benches/plugin_source_parse_noop.rs -------------------------------------------------------------------------------- /falco_plugin_tests/benches/plugin_threadinfo.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/benches/plugin_threadinfo.rs -------------------------------------------------------------------------------- /falco_plugin_tests/build.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/build.rs -------------------------------------------------------------------------------- /falco_plugin_tests/c++/sinsp_test_driver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/c++/sinsp_test_driver.cpp -------------------------------------------------------------------------------- /falco_plugin_tests/c++/sinsp_test_driver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/c++/sinsp_test_driver.h -------------------------------------------------------------------------------- /falco_plugin_tests/src/bin/dump_raw_events.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/bin/dump_raw_events.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/common.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/common.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/ffi.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/ffi.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/lib.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/native.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/native.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/events/countdown.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/events/countdown.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/events/mod.rs: -------------------------------------------------------------------------------- 1 | pub mod countdown; 2 | -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/extract/extra_fields.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/extract/extra_fields.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/extract/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/extract/mod.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/extract/nested.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/extract/nested.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/extract/remaining_from_payload.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/extract/remaining_from_payload.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/extract/remaining_from_table.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/extract/remaining_from_table.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/extract/remaining_from_table_runtime.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/extract/remaining_from_table_runtime.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/mod.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/parse/extra_fields.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/parse/extra_fields.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/parse/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/parse/mod.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/parse/nested_table_extra_fields.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/parse/nested_table_extra_fields.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/parse/remaining_into_nested_table.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/parse/remaining_into_nested_table.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/parse/remaining_into_table_api.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/parse/remaining_into_table_api.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/parse/remaining_into_table_direct.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/parse/remaining_into_table_direct.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/source/batched_empty_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/source/batched_empty_event.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/source/countdown.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/source/countdown.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/source/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/source/mod.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/tables/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/tables/mod.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/tables/remaining_export.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/tables/remaining_export.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/tables/remaining_import.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/tables/remaining_import.rs -------------------------------------------------------------------------------- /falco_plugin_tests/src/plugin_collection/tables/remaining_import_extra_fields.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/src/plugin_collection/tables/remaining_import_extra_fields.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/async.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/async.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/async_tables.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/async_tables.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/capture_listen_resched.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/capture_listen_resched.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/capture_listen_run_forever.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/capture_listen_run_forever.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/dummy.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/dummy.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/dummy_source.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/dummy_source.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/dummy_source_fail.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/dummy_source_fail.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/dummy_source_json.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/dummy_source_json.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/dummy_syscall_source.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/dummy_syscall_source.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/extract.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/extract.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/extract_range.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/extract_range.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/extract_types.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/extract_types.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/parse.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/parse.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/parse_runtime.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/parse_runtime.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/parse_table_api.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/parse_table_api.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/parse_table_nested.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/parse_table_nested.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/scap.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/scap.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/scap/kexec_x86.raw: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/scap/kexec_x86.raw -------------------------------------------------------------------------------- /falco_plugin_tests/tests/scap/kexec_x86.scap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/scap/kexec_x86.scap -------------------------------------------------------------------------------- /falco_plugin_tests/tests/scap_import_table.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/scap_import_table.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/scap_import_table_bad_key_type.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/scap_import_table_bad_key_type.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/source_batch.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/source_batch.rs -------------------------------------------------------------------------------- /falco_plugin_tests/tests/source_single.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_plugin_tests/tests/source_single.rs -------------------------------------------------------------------------------- /falco_schema_derive/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_schema_derive/Cargo.toml -------------------------------------------------------------------------------- /falco_schema_derive/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_schema_derive/README.md -------------------------------------------------------------------------------- /falco_schema_derive/src/dynamic_params.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_schema_derive/src/dynamic_params.rs -------------------------------------------------------------------------------- /falco_schema_derive/src/event_flags.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_schema_derive/src/event_flags.rs -------------------------------------------------------------------------------- /falco_schema_derive/src/event_info.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_schema_derive/src/event_info.rs -------------------------------------------------------------------------------- /falco_schema_derive/src/format.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_schema_derive/src/format.rs -------------------------------------------------------------------------------- /falco_schema_derive/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/falco_schema_derive/src/lib.rs -------------------------------------------------------------------------------- /justfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugin-sdk-rs/HEAD/justfile --------------------------------------------------------------------------------