aquasecurity / aquasecurity/tracee
[FEAT] tracee replay flag
Open
kind/feature
- Dominant language
- Go
- Stars
- 4.6k
- Forks
- 507
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 9
Description
1. Remove analyze subcommand
2. Integrate functionality as a source flag in tracee - "analyze" will merely be a reingestion of event input into the pipeline
3. Split pipeline beginning into an interface for a source program
4. Two implemented source subprograms - eBPF and json file - which can feed the pipeline
5. Open Question: How do we prevent an already derived event from rederiving and introducing duplicates in the output
Contributor guide
Assessment
This issue has not been assessed yet.