aquasecurity / aquasecurity/tracee

Extend In-Kernel Data Filtering for other events

Open
#4,432 0 comments 0 reactions 1 assignee Claimed by @rscampos View on GitHub
area/ebpf kind/feature
Dominant language
Go
Stars
4.6k
Forks
507
Avg merge
2d 8h
Merged PRs (30d)
9

Description

The first phase of the in-kernel data filter focused on implementing string-based filters (**exact**, **prefix**, **suffix**) for `security_file_open`, `magic_write`, and `security_mmap_file` events. The goal of this task, which comprises the second phase, is to extend this functionality to other events as well.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.