aquasecurity / aquasecurity/tracee
Extend In-Kernel Data Filtering for other events
Open
area/ebpf
kind/feature
- Dominant language
- Go
- Stars
- 4.6k
- Forks
- 507
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 9
Description
The first phase of the in-kernel data filter focused on implementing string-based filters (**exact**, **prefix**, **suffix**) for `security_file_open`, `magic_write`, and `security_mmap_file` events. The goal of this task, which comprises the second phase, is to extend this functionality to other events as well.
Contributor guide
Assessment
This issue has not been assessed yet.