search

armosec / kubecop

Runtime detection and response for malicious events in Kubernetes workloads
Apache License 2.0
38 stars 5 forks source link

Get syscall events with parameters #40

Open amitschendel opened 9 months ago

amitschendel commented 9 months ago

We need to get not just the syscall but also the params, so we can tell for example if ptrace attach occurred.

slashben commented 9 months ago

Wouldn't this need a ticket on https://github.com/kubescape/kapprofiler/ as well?

amitschendel commented 9 months ago

Depends on: https://github.com/kubescape/kapprofiler/issues/27