├── .clang-format ├── .github ├── PULL_REQUEST_TEMPLATE.md ├── compare-rule-files.sh ├── dependabot.yml ├── extract-plugins-deps-from-rulesfile.sh ├── get-latest-plugin-version.sh ├── setup-plugin-config-rules.sh ├── validate-rules.sh └── workflows │ ├── ci.yaml │ ├── codeql-analysis.yml │ ├── container-ci.yaml │ ├── create-comment.yaml │ ├── dummy_c-ci.yaml │ ├── k8smeta-ci.yaml │ ├── main.yaml │ ├── registry.yaml │ ├── release.yml │ ├── reusable-publish-oci-artifacts.yaml │ ├── reusable_build_packages.yaml │ ├── reusable_build_rules_tool.yaml │ ├── reusable_get_changed_plugins.yaml │ ├── reusable_publish_packages.yaml │ ├── reusable_suggest_rules_version.yaml │ ├── reusable_upload_pr_info.yaml │ └── reusable_validate_plugins.yaml ├── .gitignore ├── .pre-commit-config.yaml ├── LICENSE ├── Makefile ├── OWNERS ├── README.md ├── changelog-gen.sh ├── docs ├── best-practices.md ├── plugin-ids.md └── registering-a-plugin.md ├── plugins ├── anomalydetection │ ├── .gitignore │ ├── CHANGELOG.md │ ├── CMakeLists.txt │ ├── Makefile │ ├── README.md │ ├── cmake │ │ └── modules │ │ │ ├── libs.cmake │ │ │ ├── plugin-sdk-cpp.cmake │ │ │ └── xxhash.cmake │ ├── src │ │ ├── num │ │ │ ├── cms.h │ │ │ └── xxhash_ext.h │ │ ├── plugin.cpp │ │ ├── plugin.h │ │ ├── plugin_consts.h │ │ ├── plugin_mutex.h │ │ ├── plugin_sinsp_filterchecks.h │ │ ├── plugin_thread_manager.h │ │ ├── plugin_utils.cpp │ │ └── plugin_utils.h │ └── test │ │ ├── CMakeLists.txt │ │ ├── README.md │ │ ├── include │ │ └── test_helpers.h │ │ ├── plugin_test_var.h.in │ │ └── src │ │ └── num │ │ └── cms.ut.cpp ├── cloudtrail │ ├── CHANGELOG.md │ ├── Makefile │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── cloudtrail │ │ │ ├── aws.go │ │ │ ├── cloudtrail.go │ │ │ ├── config.go │ │ │ ├── extract.go │ │ │ ├── interval.go │ │ │ └── source.go │ ├── plugin │ │ └── cloudtrail.go │ └── rules │ │ └── aws_cloudtrail_rules.yaml ├── collector │ ├── CHANGELOG.md │ ├── Makefile │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── collector │ │ │ └── collector.go │ └── plugin │ │ └── collector.go ├── container │ ├── .gitignore │ ├── CHANGELOG.md │ ├── CMakeLists.txt │ ├── Makefile │ ├── README.md │ ├── architecture.svg │ ├── cmake │ │ └── modules │ │ │ ├── btrfs.cmake │ │ │ ├── caps.cmake │ │ │ ├── compiler.cmake │ │ │ ├── fmt.cmake │ │ │ ├── go-worker.cmake │ │ │ ├── gtest.cmake │ │ │ ├── plugin-sdk-cpp.cmake │ │ │ └── reflex.cmake │ ├── go-worker │ │ ├── .gitignore │ │ ├── Makefile │ │ ├── go.mod │ │ ├── go.sum │ │ ├── main_exe.go │ │ ├── main_lib.go │ │ ├── pkg │ │ │ ├── config │ │ │ │ ├── config.go │ │ │ │ ├── config_test.go │ │ │ │ ├── log_handler.go │ │ │ │ └── log_handler_test.go │ │ │ ├── container │ │ │ │ ├── containerd.go │ │ │ │ ├── containerd_test.go │ │ │ │ ├── cri.go │ │ │ │ ├── cri_test.go │ │ │ │ ├── docker.go │ │ │ │ ├── docker_test.go │ │ │ │ ├── engine.go │ │ │ │ ├── engine_test.go │ │ │ │ ├── fetcher.go │ │ │ │ ├── fetcher_test.go │ │ │ │ ├── podman.go │ │ │ │ └── podman_test.go │ │ │ └── event │ │ │ │ └── event.go │ │ ├── worker.go │ │ ├── worker_api.go │ │ └── worker_test.go │ ├── src │ │ ├── caps │ │ │ ├── async │ │ │ │ ├── async.cpp │ │ │ │ └── async.tpp │ │ │ ├── extract │ │ │ │ └── extract.cpp │ │ │ ├── listening │ │ │ │ └── listening.cpp │ │ │ └── parse │ │ │ │ └── parse.cpp │ │ ├── consts.h │ │ ├── container_info.cpp │ │ ├── container_info.h │ │ ├── container_info_json.cpp │ │ ├── container_info_json.h │ │ ├── container_type.h │ │ ├── macros.h.in │ │ ├── matchers │ │ │ ├── bpm.cpp │ │ │ ├── bpm.h │ │ │ ├── containerd.cpp │ │ │ ├── containerd.h │ │ │ ├── cri.cpp │ │ │ ├── cri.h │ │ │ ├── docker.cpp │ │ │ ├── docker.h │ │ │ ├── libvirt_lxc.cpp │ │ │ ├── libvirt_lxc.h │ │ │ ├── lxc.cpp │ │ │ ├── lxc.h │ │ │ ├── matcher.cpp │ │ │ ├── matcher.h │ │ │ ├── podman.cpp │ │ │ ├── podman.h │ │ │ ├── runc.cpp │ │ │ ├── runc.h │ │ │ ├── static_container.cpp │ │ │ └── static_container.h │ │ ├── plugin.cpp │ │ ├── plugin.h │ │ ├── plugin_config.cpp │ │ ├── plugin_config.h │ │ ├── plugin_config_schema.h │ │ └── table.cpp │ └── test │ │ ├── CMakeLists.txt │ │ ├── config.cpp │ │ ├── container_info_json.cpp │ │ ├── matchers.cpp │ │ └── mounts.cpp ├── dummy │ ├── CHANGELOG.md │ ├── Makefile │ ├── README.md │ ├── dummy_rules.yaml │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── dummy │ │ │ └── dummy.go │ └── plugin │ │ └── dummy.go ├── dummy_c │ ├── CHANGELOG.md │ ├── Makefile │ ├── README.md │ ├── dummy.cpp │ └── dummy_c_rules.yaml ├── dummy_rs │ ├── .gitignore │ ├── CHANGELOG.md │ ├── Cargo.lock │ ├── Cargo.toml │ ├── Makefile │ ├── README.md │ ├── dummy_rs_rules.yaml │ ├── rustfmt.toml │ └── src │ │ └── libdummy_rs.rs ├── gcpaudit │ ├── .gitignore │ ├── CHANGELOG.md │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── images │ │ └── architecture.png │ ├── pkg │ │ └── gcpaudit │ │ │ ├── config.go │ │ │ ├── extract.go │ │ │ ├── gcpaudit.go │ │ │ ├── init.go │ │ │ └── source.go │ ├── plugin │ │ └── plugin.go │ ├── rules │ │ └── gcp_auditlog_rules.yaml │ └── walkthrough.md ├── github │ ├── CHANGELOG.md │ ├── Makefile │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── github │ │ │ ├── config.go │ │ │ ├── extract.go │ │ │ ├── github.go │ │ │ ├── miners.go │ │ │ ├── secrets.go │ │ │ ├── server.go │ │ │ └── source.go │ ├── plugin │ │ └── github.go │ └── rules │ │ └── github.yaml ├── json │ ├── CHANGELOG.md │ ├── Makefile │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── json │ │ │ ├── config.go │ │ │ ├── json.go │ │ │ └── json_test.go │ └── plugin │ │ └── json.go ├── k8saudit-aks │ ├── .gitignore │ ├── CHANGELOG.md │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── k8sauditaks │ │ │ └── k8sauditaks.go │ └── plugin │ │ └── main.go ├── k8saudit-eks │ ├── .gitignore │ ├── CHANGELOG.md │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── k8sauditeks │ │ │ └── k8sauditeks.go │ └── plugin │ │ └── main.go ├── k8saudit-gke │ ├── CHANGELOG.md │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── hack │ │ ├── falco.yaml │ │ └── rules.yaml │ ├── pkg │ │ └── k8sauditgke │ │ │ ├── config.go │ │ │ ├── convert.go │ │ │ ├── init.go │ │ │ ├── k8sauditgke.go │ │ │ ├── metadata.go │ │ │ └── source.go │ ├── plugin │ │ └── main.go │ └── rules │ │ ├── k8s_audit_rules.yaml │ │ └── k8s_audit_rules_gke.yaml ├── k8saudit-ovh │ ├── .gitignore │ ├── CHANGELOG.md │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── k8sauditovh │ │ │ ├── k8sauditovh.go │ │ │ └── template.go │ └── plugin │ │ └── main.go ├── k8saudit │ ├── .gitignore │ ├── CHANGELOG.md │ ├── Makefile │ ├── README.md │ ├── configs │ │ ├── audit-policy.yaml │ │ └── webhook-config.yaml.in │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ └── k8saudit │ │ │ ├── config.go │ │ │ ├── extract.go │ │ │ ├── extract_test.go │ │ │ ├── fields.go │ │ │ ├── k8saudit.go │ │ │ └── source.go │ ├── plugin │ │ └── k8saudit.go │ └── rules │ │ └── k8s_audit_rules.yaml ├── k8smeta │ ├── .gitignore │ ├── CHANGELOG.md │ ├── CMakeLists.txt │ ├── Makefile │ ├── README.md │ ├── cmake │ │ └── modules │ │ │ ├── grpc.cmake │ │ │ ├── k8s-metacollector.cmake │ │ │ ├── libs.cmake │ │ │ ├── plugin-sdk-cpp.cmake │ │ │ └── spdlog.cmake │ ├── falco.yaml │ ├── src │ │ ├── grpc_client.cpp │ │ ├── grpc_client.h │ │ ├── plugin.cpp │ │ ├── plugin.h │ │ ├── plugin_only_consts.h │ │ └── shared_with_tests_consts.h │ └── test │ │ ├── CMakeLists.txt │ │ ├── README.md │ │ ├── include │ │ └── k8smeta_tests │ │ │ └── helpers.h │ │ ├── plugin_test_var.h.in │ │ ├── rules │ │ └── example_rule.yaml │ │ └── src │ │ ├── check_events.cpp │ │ ├── init_config.cpp │ │ └── parsing_pod.cpp ├── kafka │ ├── CHANGELOG.md │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ │ ├── helpers │ │ │ └── mock_writers.go │ │ └── kafka │ │ │ ├── kafka.go │ │ │ └── kafka_test.go │ └── plugin │ │ └── kafka.go ├── krsi │ ├── .gitignore │ ├── CHANGELOG.md │ ├── Cargo.lock │ ├── Cargo.toml │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── example_rules.yaml │ ├── krsi-common │ │ ├── Cargo.toml │ │ └── src │ │ │ ├── flags.rs │ │ │ ├── lib.rs │ │ │ └── scap.rs │ ├── krsi-ebpf-core │ │ ├── Cargo.toml │ │ ├── build.rs │ │ └── src │ │ │ ├── c │ │ │ ├── core_helpers.c │ │ │ └── core_helpers.h │ │ │ └── lib.rs │ ├── krsi-ebpf │ │ ├── Cargo.toml │ │ ├── build.rs │ │ └── src │ │ │ ├── auxbuf.rs │ │ │ ├── defs.rs │ │ │ ├── files.rs │ │ │ ├── files │ │ │ └── dev.rs │ │ │ ├── iouring.rs │ │ │ ├── lib.rs │ │ │ ├── main.rs │ │ │ ├── operations.rs │ │ │ ├── operations │ │ │ ├── bind.rs │ │ │ ├── connect.rs │ │ │ ├── linkat.rs │ │ │ ├── mkdirat.rs │ │ │ ├── open.rs │ │ │ ├── renameat.rs │ │ │ ├── socket.rs │ │ │ ├── symlinkat.rs │ │ │ ├── unlinkat.rs │ │ │ └── writer_helpers.rs │ │ │ ├── scap.rs │ │ │ ├── shared_state.rs │ │ │ ├── shared_state │ │ │ └── op_info.rs │ │ │ └── sockets.rs │ ├── krsi │ │ ├── Cargo.toml │ │ ├── build.rs │ │ └── src │ │ │ ├── ebpf.rs │ │ │ ├── krsi_event.rs │ │ │ └── lib.rs │ ├── rustfmt.toml │ └── test │ │ ├── Dockerfile │ │ ├── README.md │ │ └── test.c └── okta │ ├── .gitignore │ ├── CHANGELOG.md │ ├── LICENSE │ ├── Makefile │ ├── OWNERS │ ├── README.md │ ├── go.mod │ ├── go.sum │ ├── pkg │ └── okta │ │ └── okta.go │ ├── plugin │ └── okta.go │ └── rules │ └── okta_rules.yaml ├── registry.yaml ├── release.md ├── shared └── go │ ├── aws │ ├── cloudwatchlogs │ │ ├── cloudwatch.go │ │ ├── go.mod │ │ └── go.sum │ └── session │ │ ├── go.mod │ │ ├── go.sum │ │ └── session.go │ └── azure │ └── eventhub │ ├── go.mod │ ├── go.sum │ └── processor.go └── tools └── local_hooks └── dco-pre-commit-msg.sh /.clang-format: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.clang-format -------------------------------------------------------------------------------- /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/PULL_REQUEST_TEMPLATE.md -------------------------------------------------------------------------------- /.github/compare-rule-files.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/compare-rule-files.sh -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/dependabot.yml -------------------------------------------------------------------------------- /.github/extract-plugins-deps-from-rulesfile.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/extract-plugins-deps-from-rulesfile.sh -------------------------------------------------------------------------------- /.github/get-latest-plugin-version.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/get-latest-plugin-version.sh -------------------------------------------------------------------------------- /.github/setup-plugin-config-rules.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/setup-plugin-config-rules.sh -------------------------------------------------------------------------------- /.github/validate-rules.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/validate-rules.sh -------------------------------------------------------------------------------- /.github/workflows/ci.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/ci.yaml -------------------------------------------------------------------------------- /.github/workflows/codeql-analysis.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/codeql-analysis.yml -------------------------------------------------------------------------------- /.github/workflows/container-ci.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/container-ci.yaml -------------------------------------------------------------------------------- /.github/workflows/create-comment.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/create-comment.yaml -------------------------------------------------------------------------------- /.github/workflows/dummy_c-ci.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/dummy_c-ci.yaml -------------------------------------------------------------------------------- /.github/workflows/k8smeta-ci.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/k8smeta-ci.yaml -------------------------------------------------------------------------------- /.github/workflows/main.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/main.yaml -------------------------------------------------------------------------------- /.github/workflows/registry.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/registry.yaml -------------------------------------------------------------------------------- /.github/workflows/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/release.yml -------------------------------------------------------------------------------- /.github/workflows/reusable-publish-oci-artifacts.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable-publish-oci-artifacts.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_build_packages.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable_build_packages.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_build_rules_tool.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable_build_rules_tool.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_get_changed_plugins.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable_get_changed_plugins.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_publish_packages.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable_publish_packages.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_suggest_rules_version.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable_suggest_rules_version.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_upload_pr_info.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable_upload_pr_info.yaml -------------------------------------------------------------------------------- /.github/workflows/reusable_validate_plugins.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.github/workflows/reusable_validate_plugins.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.gitignore -------------------------------------------------------------------------------- /.pre-commit-config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/.pre-commit-config.yaml -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/Makefile -------------------------------------------------------------------------------- /OWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/OWNERS -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/README.md -------------------------------------------------------------------------------- /changelog-gen.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/changelog-gen.sh -------------------------------------------------------------------------------- /docs/best-practices.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/docs/best-practices.md -------------------------------------------------------------------------------- /docs/plugin-ids.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/docs/plugin-ids.md -------------------------------------------------------------------------------- /docs/registering-a-plugin.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/docs/registering-a-plugin.md -------------------------------------------------------------------------------- /plugins/anomalydetection/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/.gitignore -------------------------------------------------------------------------------- /plugins/anomalydetection/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/anomalydetection/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/CMakeLists.txt -------------------------------------------------------------------------------- /plugins/anomalydetection/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/Makefile -------------------------------------------------------------------------------- /plugins/anomalydetection/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/README.md -------------------------------------------------------------------------------- /plugins/anomalydetection/cmake/modules/libs.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/cmake/modules/libs.cmake -------------------------------------------------------------------------------- /plugins/anomalydetection/cmake/modules/plugin-sdk-cpp.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/cmake/modules/plugin-sdk-cpp.cmake -------------------------------------------------------------------------------- /plugins/anomalydetection/cmake/modules/xxhash.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/cmake/modules/xxhash.cmake -------------------------------------------------------------------------------- /plugins/anomalydetection/src/num/cms.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/num/cms.h -------------------------------------------------------------------------------- /plugins/anomalydetection/src/num/xxhash_ext.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/num/xxhash_ext.h -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin.cpp -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin.h -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin_consts.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin_consts.h -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin_mutex.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin_mutex.h -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin_sinsp_filterchecks.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin_sinsp_filterchecks.h -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin_thread_manager.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin_thread_manager.h -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin_utils.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin_utils.cpp -------------------------------------------------------------------------------- /plugins/anomalydetection/src/plugin_utils.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/src/plugin_utils.h -------------------------------------------------------------------------------- /plugins/anomalydetection/test/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/test/CMakeLists.txt -------------------------------------------------------------------------------- /plugins/anomalydetection/test/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/test/README.md -------------------------------------------------------------------------------- /plugins/anomalydetection/test/include/test_helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/test/include/test_helpers.h -------------------------------------------------------------------------------- /plugins/anomalydetection/test/plugin_test_var.h.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/test/plugin_test_var.h.in -------------------------------------------------------------------------------- /plugins/anomalydetection/test/src/num/cms.ut.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/anomalydetection/test/src/num/cms.ut.cpp -------------------------------------------------------------------------------- /plugins/cloudtrail/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/cloudtrail/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/Makefile -------------------------------------------------------------------------------- /plugins/cloudtrail/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/README.md -------------------------------------------------------------------------------- /plugins/cloudtrail/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/go.mod -------------------------------------------------------------------------------- /plugins/cloudtrail/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/go.sum -------------------------------------------------------------------------------- /plugins/cloudtrail/pkg/cloudtrail/aws.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/pkg/cloudtrail/aws.go -------------------------------------------------------------------------------- /plugins/cloudtrail/pkg/cloudtrail/cloudtrail.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/pkg/cloudtrail/cloudtrail.go -------------------------------------------------------------------------------- /plugins/cloudtrail/pkg/cloudtrail/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/pkg/cloudtrail/config.go -------------------------------------------------------------------------------- /plugins/cloudtrail/pkg/cloudtrail/extract.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/pkg/cloudtrail/extract.go -------------------------------------------------------------------------------- /plugins/cloudtrail/pkg/cloudtrail/interval.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/pkg/cloudtrail/interval.go -------------------------------------------------------------------------------- /plugins/cloudtrail/pkg/cloudtrail/source.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/pkg/cloudtrail/source.go -------------------------------------------------------------------------------- /plugins/cloudtrail/plugin/cloudtrail.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/plugin/cloudtrail.go -------------------------------------------------------------------------------- /plugins/cloudtrail/rules/aws_cloudtrail_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/cloudtrail/rules/aws_cloudtrail_rules.yaml -------------------------------------------------------------------------------- /plugins/collector/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/collector/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/collector/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/collector/Makefile -------------------------------------------------------------------------------- /plugins/collector/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/collector/README.md -------------------------------------------------------------------------------- /plugins/collector/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/collector/go.mod -------------------------------------------------------------------------------- /plugins/collector/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/collector/go.sum -------------------------------------------------------------------------------- /plugins/collector/pkg/collector/collector.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/collector/pkg/collector/collector.go -------------------------------------------------------------------------------- /plugins/collector/plugin/collector.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/collector/plugin/collector.go -------------------------------------------------------------------------------- /plugins/container/.gitignore: -------------------------------------------------------------------------------- 1 | *.so 2 | *.a 3 | *.o 4 | .vscode 5 | .idea 6 | build* -------------------------------------------------------------------------------- /plugins/container/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/container/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/CMakeLists.txt -------------------------------------------------------------------------------- /plugins/container/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/Makefile -------------------------------------------------------------------------------- /plugins/container/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/README.md -------------------------------------------------------------------------------- /plugins/container/architecture.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/architecture.svg -------------------------------------------------------------------------------- /plugins/container/cmake/modules/btrfs.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/btrfs.cmake -------------------------------------------------------------------------------- /plugins/container/cmake/modules/caps.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/caps.cmake -------------------------------------------------------------------------------- /plugins/container/cmake/modules/compiler.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/compiler.cmake -------------------------------------------------------------------------------- /plugins/container/cmake/modules/fmt.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/fmt.cmake -------------------------------------------------------------------------------- /plugins/container/cmake/modules/go-worker.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/go-worker.cmake -------------------------------------------------------------------------------- /plugins/container/cmake/modules/gtest.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/gtest.cmake -------------------------------------------------------------------------------- /plugins/container/cmake/modules/plugin-sdk-cpp.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/plugin-sdk-cpp.cmake -------------------------------------------------------------------------------- /plugins/container/cmake/modules/reflex.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/cmake/modules/reflex.cmake -------------------------------------------------------------------------------- /plugins/container/go-worker/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/.gitignore -------------------------------------------------------------------------------- /plugins/container/go-worker/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/Makefile -------------------------------------------------------------------------------- /plugins/container/go-worker/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/go.mod -------------------------------------------------------------------------------- /plugins/container/go-worker/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/go.sum -------------------------------------------------------------------------------- /plugins/container/go-worker/main_exe.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/main_exe.go -------------------------------------------------------------------------------- /plugins/container/go-worker/main_lib.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/main_lib.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/config/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/config/config.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/config/config_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/config/config_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/config/log_handler.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/config/log_handler.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/config/log_handler_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/config/log_handler_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/containerd.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/containerd.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/containerd_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/containerd_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/cri.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/cri.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/cri_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/cri_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/docker.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/docker.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/docker_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/docker_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/engine.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/engine.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/engine_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/engine_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/fetcher.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/fetcher.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/fetcher_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/fetcher_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/podman.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/podman.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/container/podman_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/container/podman_test.go -------------------------------------------------------------------------------- /plugins/container/go-worker/pkg/event/event.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/pkg/event/event.go -------------------------------------------------------------------------------- /plugins/container/go-worker/worker.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/worker.go -------------------------------------------------------------------------------- /plugins/container/go-worker/worker_api.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/worker_api.go -------------------------------------------------------------------------------- /plugins/container/go-worker/worker_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/go-worker/worker_test.go -------------------------------------------------------------------------------- /plugins/container/src/caps/async/async.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/caps/async/async.cpp -------------------------------------------------------------------------------- /plugins/container/src/caps/async/async.tpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/caps/async/async.tpp -------------------------------------------------------------------------------- /plugins/container/src/caps/extract/extract.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/caps/extract/extract.cpp -------------------------------------------------------------------------------- /plugins/container/src/caps/listening/listening.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/caps/listening/listening.cpp -------------------------------------------------------------------------------- /plugins/container/src/caps/parse/parse.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/caps/parse/parse.cpp -------------------------------------------------------------------------------- /plugins/container/src/consts.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/consts.h -------------------------------------------------------------------------------- /plugins/container/src/container_info.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/container_info.cpp -------------------------------------------------------------------------------- /plugins/container/src/container_info.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/container_info.h -------------------------------------------------------------------------------- /plugins/container/src/container_info_json.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/container_info_json.cpp -------------------------------------------------------------------------------- /plugins/container/src/container_info_json.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/container_info_json.h -------------------------------------------------------------------------------- /plugins/container/src/container_type.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/container_type.h -------------------------------------------------------------------------------- /plugins/container/src/macros.h.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/macros.h.in -------------------------------------------------------------------------------- /plugins/container/src/matchers/bpm.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/bpm.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/bpm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/bpm.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/containerd.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/containerd.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/containerd.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/containerd.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/cri.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/cri.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/cri.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/cri.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/docker.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/docker.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/docker.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/docker.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/libvirt_lxc.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/libvirt_lxc.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/libvirt_lxc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/libvirt_lxc.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/lxc.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/lxc.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/lxc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/lxc.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/matcher.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/matcher.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/matcher.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/matcher.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/podman.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/podman.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/podman.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/podman.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/runc.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/runc.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/runc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/runc.h -------------------------------------------------------------------------------- /plugins/container/src/matchers/static_container.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/static_container.cpp -------------------------------------------------------------------------------- /plugins/container/src/matchers/static_container.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/matchers/static_container.h -------------------------------------------------------------------------------- /plugins/container/src/plugin.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/plugin.cpp -------------------------------------------------------------------------------- /plugins/container/src/plugin.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/plugin.h -------------------------------------------------------------------------------- /plugins/container/src/plugin_config.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/plugin_config.cpp -------------------------------------------------------------------------------- /plugins/container/src/plugin_config.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/plugin_config.h -------------------------------------------------------------------------------- /plugins/container/src/plugin_config_schema.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/plugin_config_schema.h -------------------------------------------------------------------------------- /plugins/container/src/table.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/src/table.cpp -------------------------------------------------------------------------------- /plugins/container/test/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/test/CMakeLists.txt -------------------------------------------------------------------------------- /plugins/container/test/config.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/test/config.cpp -------------------------------------------------------------------------------- /plugins/container/test/container_info_json.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/test/container_info_json.cpp -------------------------------------------------------------------------------- /plugins/container/test/matchers.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/test/matchers.cpp -------------------------------------------------------------------------------- /plugins/container/test/mounts.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/container/test/mounts.cpp -------------------------------------------------------------------------------- /plugins/dummy/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/dummy/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/Makefile -------------------------------------------------------------------------------- /plugins/dummy/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/README.md -------------------------------------------------------------------------------- /plugins/dummy/dummy_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/dummy_rules.yaml -------------------------------------------------------------------------------- /plugins/dummy/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/go.mod -------------------------------------------------------------------------------- /plugins/dummy/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/go.sum -------------------------------------------------------------------------------- /plugins/dummy/pkg/dummy/dummy.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/pkg/dummy/dummy.go -------------------------------------------------------------------------------- /plugins/dummy/plugin/dummy.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy/plugin/dummy.go -------------------------------------------------------------------------------- /plugins/dummy_c/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_c/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/dummy_c/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_c/Makefile -------------------------------------------------------------------------------- /plugins/dummy_c/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_c/README.md -------------------------------------------------------------------------------- /plugins/dummy_c/dummy.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_c/dummy.cpp -------------------------------------------------------------------------------- /plugins/dummy_c/dummy_c_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_c/dummy_c_rules.yaml -------------------------------------------------------------------------------- /plugins/dummy_rs/.gitignore: -------------------------------------------------------------------------------- 1 | target -------------------------------------------------------------------------------- /plugins/dummy_rs/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/dummy_rs/Cargo.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/Cargo.lock -------------------------------------------------------------------------------- /plugins/dummy_rs/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/Cargo.toml -------------------------------------------------------------------------------- /plugins/dummy_rs/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/Makefile -------------------------------------------------------------------------------- /plugins/dummy_rs/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/README.md -------------------------------------------------------------------------------- /plugins/dummy_rs/dummy_rs_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/dummy_rs_rules.yaml -------------------------------------------------------------------------------- /plugins/dummy_rs/rustfmt.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/rustfmt.toml -------------------------------------------------------------------------------- /plugins/dummy_rs/src/libdummy_rs.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/dummy_rs/src/libdummy_rs.rs -------------------------------------------------------------------------------- /plugins/gcpaudit/.gitignore: -------------------------------------------------------------------------------- 1 | *.so 2 | -------------------------------------------------------------------------------- /plugins/gcpaudit/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/gcpaudit/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/Makefile -------------------------------------------------------------------------------- /plugins/gcpaudit/OWNERS: -------------------------------------------------------------------------------- 1 | approvers: 2 | - ahmedameenaim 3 | 4 | -------------------------------------------------------------------------------- /plugins/gcpaudit/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/README.md -------------------------------------------------------------------------------- /plugins/gcpaudit/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/go.mod -------------------------------------------------------------------------------- /plugins/gcpaudit/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/go.sum -------------------------------------------------------------------------------- /plugins/gcpaudit/images/architecture.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/images/architecture.png -------------------------------------------------------------------------------- /plugins/gcpaudit/pkg/gcpaudit/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/pkg/gcpaudit/config.go -------------------------------------------------------------------------------- /plugins/gcpaudit/pkg/gcpaudit/extract.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/pkg/gcpaudit/extract.go -------------------------------------------------------------------------------- /plugins/gcpaudit/pkg/gcpaudit/gcpaudit.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/pkg/gcpaudit/gcpaudit.go -------------------------------------------------------------------------------- /plugins/gcpaudit/pkg/gcpaudit/init.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/pkg/gcpaudit/init.go -------------------------------------------------------------------------------- /plugins/gcpaudit/pkg/gcpaudit/source.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/pkg/gcpaudit/source.go -------------------------------------------------------------------------------- /plugins/gcpaudit/plugin/plugin.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/plugin/plugin.go -------------------------------------------------------------------------------- /plugins/gcpaudit/rules/gcp_auditlog_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/rules/gcp_auditlog_rules.yaml -------------------------------------------------------------------------------- /plugins/gcpaudit/walkthrough.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/gcpaudit/walkthrough.md -------------------------------------------------------------------------------- /plugins/github/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/github/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/Makefile -------------------------------------------------------------------------------- /plugins/github/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/README.md -------------------------------------------------------------------------------- /plugins/github/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/go.mod -------------------------------------------------------------------------------- /plugins/github/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/go.sum -------------------------------------------------------------------------------- /plugins/github/pkg/github/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/pkg/github/config.go -------------------------------------------------------------------------------- /plugins/github/pkg/github/extract.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/pkg/github/extract.go -------------------------------------------------------------------------------- /plugins/github/pkg/github/github.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/pkg/github/github.go -------------------------------------------------------------------------------- /plugins/github/pkg/github/miners.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/pkg/github/miners.go -------------------------------------------------------------------------------- /plugins/github/pkg/github/secrets.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/pkg/github/secrets.go -------------------------------------------------------------------------------- /plugins/github/pkg/github/server.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/pkg/github/server.go -------------------------------------------------------------------------------- /plugins/github/pkg/github/source.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/pkg/github/source.go -------------------------------------------------------------------------------- /plugins/github/plugin/github.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/plugin/github.go -------------------------------------------------------------------------------- /plugins/github/rules/github.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/github/rules/github.yaml -------------------------------------------------------------------------------- /plugins/json/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/json/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/Makefile -------------------------------------------------------------------------------- /plugins/json/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/README.md -------------------------------------------------------------------------------- /plugins/json/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/go.mod -------------------------------------------------------------------------------- /plugins/json/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/go.sum -------------------------------------------------------------------------------- /plugins/json/pkg/json/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/pkg/json/config.go -------------------------------------------------------------------------------- /plugins/json/pkg/json/json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/pkg/json/json.go -------------------------------------------------------------------------------- /plugins/json/pkg/json/json_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/pkg/json/json_test.go -------------------------------------------------------------------------------- /plugins/json/plugin/json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/json/plugin/json.go -------------------------------------------------------------------------------- /plugins/k8saudit-aks/.gitignore: -------------------------------------------------------------------------------- 1 | test_files 2 | libk8saudit-aks.so 3 | .vscode 4 | falco.yaml 5 | .envrc 6 | -------------------------------------------------------------------------------- /plugins/k8saudit-aks/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/k8saudit-aks/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/Makefile -------------------------------------------------------------------------------- /plugins/k8saudit-aks/OWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/OWNERS -------------------------------------------------------------------------------- /plugins/k8saudit-aks/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/README.md -------------------------------------------------------------------------------- /plugins/k8saudit-aks/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/go.mod -------------------------------------------------------------------------------- /plugins/k8saudit-aks/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/go.sum -------------------------------------------------------------------------------- /plugins/k8saudit-aks/pkg/k8sauditaks/k8sauditaks.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/pkg/k8sauditaks/k8sauditaks.go -------------------------------------------------------------------------------- /plugins/k8saudit-aks/plugin/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-aks/plugin/main.go -------------------------------------------------------------------------------- /plugins/k8saudit-eks/.gitignore: -------------------------------------------------------------------------------- 1 | test_files 2 | libk8saudit-eks.so 3 | .vscode 4 | falco.yaml -------------------------------------------------------------------------------- /plugins/k8saudit-eks/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-eks/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/k8saudit-eks/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-eks/Makefile -------------------------------------------------------------------------------- /plugins/k8saudit-eks/OWNERS: -------------------------------------------------------------------------------- 1 | approvers: 2 | - Issif 3 | -------------------------------------------------------------------------------- /plugins/k8saudit-eks/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-eks/README.md -------------------------------------------------------------------------------- /plugins/k8saudit-eks/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-eks/go.mod -------------------------------------------------------------------------------- /plugins/k8saudit-eks/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-eks/go.sum -------------------------------------------------------------------------------- /plugins/k8saudit-eks/pkg/k8sauditeks/k8sauditeks.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-eks/pkg/k8sauditeks/k8sauditeks.go -------------------------------------------------------------------------------- /plugins/k8saudit-eks/plugin/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-eks/plugin/main.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/k8saudit-gke/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/Makefile -------------------------------------------------------------------------------- /plugins/k8saudit-gke/OWNERS: -------------------------------------------------------------------------------- 1 | approvers: 2 | - sboschman 3 | -------------------------------------------------------------------------------- /plugins/k8saudit-gke/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/README.md -------------------------------------------------------------------------------- /plugins/k8saudit-gke/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/go.mod -------------------------------------------------------------------------------- /plugins/k8saudit-gke/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/go.sum -------------------------------------------------------------------------------- /plugins/k8saudit-gke/hack/falco.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/hack/falco.yaml -------------------------------------------------------------------------------- /plugins/k8saudit-gke/hack/rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/hack/rules.yaml -------------------------------------------------------------------------------- /plugins/k8saudit-gke/pkg/k8sauditgke/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/pkg/k8sauditgke/config.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/pkg/k8sauditgke/convert.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/pkg/k8sauditgke/convert.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/pkg/k8sauditgke/init.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/pkg/k8sauditgke/init.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/pkg/k8sauditgke/k8sauditgke.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/pkg/k8sauditgke/k8sauditgke.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/pkg/k8sauditgke/metadata.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/pkg/k8sauditgke/metadata.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/pkg/k8sauditgke/source.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/pkg/k8sauditgke/source.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/plugin/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/plugin/main.go -------------------------------------------------------------------------------- /plugins/k8saudit-gke/rules/k8s_audit_rules.yaml: -------------------------------------------------------------------------------- 1 | ../../k8saudit/rules/k8s_audit_rules.yaml -------------------------------------------------------------------------------- /plugins/k8saudit-gke/rules/k8s_audit_rules_gke.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-gke/rules/k8s_audit_rules_gke.yaml -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/.gitignore: -------------------------------------------------------------------------------- 1 | libk8saudit-ovh.so 2 | .vscode 3 | falco.yaml -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/Makefile -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/OWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/OWNERS -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/README.md -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/go.mod -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/go.sum -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/pkg/k8sauditovh/k8sauditovh.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/pkg/k8sauditovh/k8sauditovh.go -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/pkg/k8sauditovh/template.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/pkg/k8sauditovh/template.go -------------------------------------------------------------------------------- /plugins/k8saudit-ovh/plugin/main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit-ovh/plugin/main.go -------------------------------------------------------------------------------- /plugins/k8saudit/.gitignore: -------------------------------------------------------------------------------- 1 | test_files -------------------------------------------------------------------------------- /plugins/k8saudit/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/k8saudit/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/Makefile -------------------------------------------------------------------------------- /plugins/k8saudit/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/README.md -------------------------------------------------------------------------------- /plugins/k8saudit/configs/audit-policy.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/configs/audit-policy.yaml -------------------------------------------------------------------------------- /plugins/k8saudit/configs/webhook-config.yaml.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/configs/webhook-config.yaml.in -------------------------------------------------------------------------------- /plugins/k8saudit/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/go.mod -------------------------------------------------------------------------------- /plugins/k8saudit/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/go.sum -------------------------------------------------------------------------------- /plugins/k8saudit/pkg/k8saudit/config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/pkg/k8saudit/config.go -------------------------------------------------------------------------------- /plugins/k8saudit/pkg/k8saudit/extract.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/pkg/k8saudit/extract.go -------------------------------------------------------------------------------- /plugins/k8saudit/pkg/k8saudit/extract_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/pkg/k8saudit/extract_test.go -------------------------------------------------------------------------------- /plugins/k8saudit/pkg/k8saudit/fields.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/pkg/k8saudit/fields.go -------------------------------------------------------------------------------- /plugins/k8saudit/pkg/k8saudit/k8saudit.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/pkg/k8saudit/k8saudit.go -------------------------------------------------------------------------------- /plugins/k8saudit/pkg/k8saudit/source.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/pkg/k8saudit/source.go -------------------------------------------------------------------------------- /plugins/k8saudit/plugin/k8saudit.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/plugin/k8saudit.go -------------------------------------------------------------------------------- /plugins/k8saudit/rules/k8s_audit_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8saudit/rules/k8s_audit_rules.yaml -------------------------------------------------------------------------------- /plugins/k8smeta/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/.gitignore -------------------------------------------------------------------------------- /plugins/k8smeta/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/k8smeta/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/CMakeLists.txt -------------------------------------------------------------------------------- /plugins/k8smeta/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/Makefile -------------------------------------------------------------------------------- /plugins/k8smeta/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/README.md -------------------------------------------------------------------------------- /plugins/k8smeta/cmake/modules/grpc.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/cmake/modules/grpc.cmake -------------------------------------------------------------------------------- /plugins/k8smeta/cmake/modules/k8s-metacollector.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/cmake/modules/k8s-metacollector.cmake -------------------------------------------------------------------------------- /plugins/k8smeta/cmake/modules/libs.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/cmake/modules/libs.cmake -------------------------------------------------------------------------------- /plugins/k8smeta/cmake/modules/plugin-sdk-cpp.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/cmake/modules/plugin-sdk-cpp.cmake -------------------------------------------------------------------------------- /plugins/k8smeta/cmake/modules/spdlog.cmake: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/cmake/modules/spdlog.cmake -------------------------------------------------------------------------------- /plugins/k8smeta/falco.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/falco.yaml -------------------------------------------------------------------------------- /plugins/k8smeta/src/grpc_client.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/src/grpc_client.cpp -------------------------------------------------------------------------------- /plugins/k8smeta/src/grpc_client.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/src/grpc_client.h -------------------------------------------------------------------------------- /plugins/k8smeta/src/plugin.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/src/plugin.cpp -------------------------------------------------------------------------------- /plugins/k8smeta/src/plugin.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/src/plugin.h -------------------------------------------------------------------------------- /plugins/k8smeta/src/plugin_only_consts.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/src/plugin_only_consts.h -------------------------------------------------------------------------------- /plugins/k8smeta/src/shared_with_tests_consts.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/src/shared_with_tests_consts.h -------------------------------------------------------------------------------- /plugins/k8smeta/test/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/CMakeLists.txt -------------------------------------------------------------------------------- /plugins/k8smeta/test/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/README.md -------------------------------------------------------------------------------- /plugins/k8smeta/test/include/k8smeta_tests/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/include/k8smeta_tests/helpers.h -------------------------------------------------------------------------------- /plugins/k8smeta/test/plugin_test_var.h.in: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/plugin_test_var.h.in -------------------------------------------------------------------------------- /plugins/k8smeta/test/rules/example_rule.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/rules/example_rule.yaml -------------------------------------------------------------------------------- /plugins/k8smeta/test/src/check_events.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/src/check_events.cpp -------------------------------------------------------------------------------- /plugins/k8smeta/test/src/init_config.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/src/init_config.cpp -------------------------------------------------------------------------------- /plugins/k8smeta/test/src/parsing_pod.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/k8smeta/test/src/parsing_pod.cpp -------------------------------------------------------------------------------- /plugins/kafka/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/kafka/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/Makefile -------------------------------------------------------------------------------- /plugins/kafka/OWNERS: -------------------------------------------------------------------------------- 1 | reviewers: 2 | - hmadison -------------------------------------------------------------------------------- /plugins/kafka/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/README.md -------------------------------------------------------------------------------- /plugins/kafka/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/go.mod -------------------------------------------------------------------------------- /plugins/kafka/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/go.sum -------------------------------------------------------------------------------- /plugins/kafka/pkg/helpers/mock_writers.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/pkg/helpers/mock_writers.go -------------------------------------------------------------------------------- /plugins/kafka/pkg/kafka/kafka.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/pkg/kafka/kafka.go -------------------------------------------------------------------------------- /plugins/kafka/pkg/kafka/kafka_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/pkg/kafka/kafka_test.go -------------------------------------------------------------------------------- /plugins/kafka/plugin/kafka.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/kafka/plugin/kafka.go -------------------------------------------------------------------------------- /plugins/krsi/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/.gitignore -------------------------------------------------------------------------------- /plugins/krsi/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/krsi/Cargo.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/Cargo.lock -------------------------------------------------------------------------------- /plugins/krsi/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/Cargo.toml -------------------------------------------------------------------------------- /plugins/krsi/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/Makefile -------------------------------------------------------------------------------- /plugins/krsi/OWNERS: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /plugins/krsi/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/README.md -------------------------------------------------------------------------------- /plugins/krsi/example_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/example_rules.yaml -------------------------------------------------------------------------------- /plugins/krsi/krsi-common/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-common/Cargo.toml -------------------------------------------------------------------------------- /plugins/krsi/krsi-common/src/flags.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-common/src/flags.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-common/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-common/src/lib.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-common/src/scap.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-common/src/scap.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf-core/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf-core/Cargo.toml -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf-core/build.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf-core/build.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf-core/src/c/core_helpers.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf-core/src/c/core_helpers.c -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf-core/src/c/core_helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf-core/src/c/core_helpers.h -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf-core/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf-core/src/lib.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/Cargo.toml -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/build.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/build.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/auxbuf.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/auxbuf.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/defs.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/defs.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/files.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/files.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/files/dev.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/files/dev.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/iouring.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/iouring.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/lib.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/main.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/main.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/bind.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/bind.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/connect.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/connect.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/linkat.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/linkat.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/mkdirat.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/mkdirat.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/open.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/open.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/renameat.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/renameat.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/socket.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/socket.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/symlinkat.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/symlinkat.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/unlinkat.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/unlinkat.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/operations/writer_helpers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/operations/writer_helpers.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/scap.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/scap.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/shared_state.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/shared_state.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/shared_state/op_info.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/shared_state/op_info.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi-ebpf/src/sockets.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi-ebpf/src/sockets.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi/Cargo.toml -------------------------------------------------------------------------------- /plugins/krsi/krsi/build.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi/build.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi/src/ebpf.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi/src/ebpf.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi/src/krsi_event.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi/src/krsi_event.rs -------------------------------------------------------------------------------- /plugins/krsi/krsi/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/krsi/src/lib.rs -------------------------------------------------------------------------------- /plugins/krsi/rustfmt.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/rustfmt.toml -------------------------------------------------------------------------------- /plugins/krsi/test/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/test/Dockerfile -------------------------------------------------------------------------------- /plugins/krsi/test/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/test/README.md -------------------------------------------------------------------------------- /plugins/krsi/test/test.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/krsi/test/test.c -------------------------------------------------------------------------------- /plugins/okta/.gitignore: -------------------------------------------------------------------------------- 1 | falco.yaml -------------------------------------------------------------------------------- /plugins/okta/CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/CHANGELOG.md -------------------------------------------------------------------------------- /plugins/okta/LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/LICENSE -------------------------------------------------------------------------------- /plugins/okta/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/Makefile -------------------------------------------------------------------------------- /plugins/okta/OWNERS: -------------------------------------------------------------------------------- 1 | approvers: 2 | - Issif 3 | -------------------------------------------------------------------------------- /plugins/okta/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/README.md -------------------------------------------------------------------------------- /plugins/okta/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/go.mod -------------------------------------------------------------------------------- /plugins/okta/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/go.sum -------------------------------------------------------------------------------- /plugins/okta/pkg/okta/okta.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/pkg/okta/okta.go -------------------------------------------------------------------------------- /plugins/okta/plugin/okta.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/plugin/okta.go -------------------------------------------------------------------------------- /plugins/okta/rules/okta_rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/plugins/okta/rules/okta_rules.yaml -------------------------------------------------------------------------------- /registry.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/registry.yaml -------------------------------------------------------------------------------- /release.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/release.md -------------------------------------------------------------------------------- /shared/go/aws/cloudwatchlogs/cloudwatch.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/aws/cloudwatchlogs/cloudwatch.go -------------------------------------------------------------------------------- /shared/go/aws/cloudwatchlogs/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/aws/cloudwatchlogs/go.mod -------------------------------------------------------------------------------- /shared/go/aws/cloudwatchlogs/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/aws/cloudwatchlogs/go.sum -------------------------------------------------------------------------------- /shared/go/aws/session/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/aws/session/go.mod -------------------------------------------------------------------------------- /shared/go/aws/session/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/aws/session/go.sum -------------------------------------------------------------------------------- /shared/go/aws/session/session.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/aws/session/session.go -------------------------------------------------------------------------------- /shared/go/azure/eventhub/go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/azure/eventhub/go.mod -------------------------------------------------------------------------------- /shared/go/azure/eventhub/go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/azure/eventhub/go.sum -------------------------------------------------------------------------------- /shared/go/azure/eventhub/processor.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/shared/go/azure/eventhub/processor.go -------------------------------------------------------------------------------- /tools/local_hooks/dco-pre-commit-msg.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/falcosecurity/plugins/HEAD/tools/local_hooks/dco-pre-commit-msg.sh --------------------------------------------------------------------------------