falcosecurity event-generator issues

falcosecurity / event-generator

Generate a variety of suspect actions that are detected by Falco rulesets

Apache License 2.0

92 stars 38 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

chore(dockerignore): use white-list approach

#227 ekoops closed 4 hours ago
3
Docs: update for v0.12

#226 leogr closed 2 days ago
3
Implement a way to select action groups, based on rules maturity (stable, incubating, sandbox)

#225 leogr opened 2 days ago
0
increase timeout for syscall.DisallowedSSHConnectionNonStandardPort

#224 prezha closed 1 week ago
2
Fix disallowed ssh

#223 prezha closed 1 week ago
1
Disable not stable rules

#222 leogr closed 1 week ago
1
`syscall.DisallowedSSHConnectionNonStandardPort` does not trigger

#221 leogr closed 1 week ago
1
fix: Enhance Falco syscall events triggering and reliability

#220 prezha closed 1 week ago
12
Feature: Added declarative subcommand for test command

#219 GLVSKiriti closed 1 month ago
2
Feat: Add helper functions for making syscalls

#218 GLVSKiriti closed 1 month ago
3
feat(declarative): Implement ExecuteStep method for the container runner

#217 GLVSKiriti closed 2 months ago
3
Feature: Add Container runner support for declarative yaml file testing method

#216 GLVSKiriti closed 2 months ago
3
Feature: Add Container runner support for declarative yaml file testing method

#215 GLVSKiriti closed 2 months ago
1
vote: docs(OWNERS): add alacuku (Aldo Lacuku) to approvers

#214 alacuku closed 3 months ago
5
Create a new branch for gSoC 2024

#213 alacuku closed 3 months ago
1
event-generator launched through helm chart, can't run k8saudit tests

#212 alfredomagallon opened 4 months ago
2
Feature: Add support for testing falco rules using declarative YAML files in event-generator

#211 GLVSKiriti closed 3 months ago
4
Update K8saudit actions

#210 leogr opened 5 months ago
2
adding an event on `java process class file download`

#209 h4l0gen closed 5 months ago
2
Fix: In ExecutionFromDevShm we should use os.Mkdir("/dev") instead if os.Mkdir("/dev/shm")

#208 GLVSKiriti closed 5 months ago
2
adding event for this rule `mount launched in privileged container`

#207 h4l0gen closed 4 months ago
5
adding an event on rule `exfiltrating artifacts via kubernetes control plane` with the utility of creating `kind cluster`

#206 h4l0gen opened 5 months ago
6
creating an event on `mount launched in privileged container`

#205 h4l0gen closed 5 months ago
2
event on enabled incubating rule `Mount launched in privileged container`

#204 h4l0gen closed 4 months ago
1
Added an event for default stable rule Detect release_agent File Container Escapes

#203 GLVSKiriti closed 2 months ago
7
Fix: Use events.ErrSkipped with a proper Reason when skipping an actions

#202 GLVSKiriti closed 5 months ago
2
Use `events.ErrSkipped` with a proper `Reason` when skipping an actions

#201 leogr closed 5 months ago
5
event on `update_package_repository`

#200 h4l0gen opened 5 months ago
14
adding an event on `unexpected_k8s_nodeport_connection`

#199 h4l0gen opened 6 months ago
4
new(pkg/runner/helper): added SpawnAsWithSymlink and modified SpawnAs to make a copy

#198 loresuso closed 5 months ago
3
update(events/helper): add the DoNothing helper

#197 loresuso closed 6 months ago
3
Added an event for default stable rule 'Drop and execute new binary in container'

#196 GLVSKiriti closed 5 months ago
7
Add an event for default stable rule "Drop and execute new binary in container"

#195 GLVSKiriti closed 5 months ago
0
docs(events/README.md): update conventions

#194 leogr closed 6 months ago
1
Add an event for default stable rule "Detect Release_agent file container escape"

#193 GLVSKiriti closed 2 months ago
3
adding event on `exfiltrating artifacts via kubernetes control plane`

#192 h4l0gen closed 1 month ago
5
adding an event on modify container entrypoint

#191 h4l0gen closed 4 months ago
3
Added an event for default rule "Launch Package Management Process In Container"

#190 GLVSKiriti closed 6 months ago
2
Added an event for default rule "Container Drift Detected (open+create)"

#189 GLVSKiriti closed 6 months ago
5
adding an event on `interpreted procs outbound network activity`

#188 h4l0gen closed 5 months ago
4
WIP: event on `bpf program not profiled`

#187 h4l0gen closed 3 weeks ago
5
event on `Modify container entrypoint`

#186 h4l0gen closed 4 months ago
1
adding event on `Redirect stdout/stdin to network connection in container`

#185 h4l0gen opened 6 months ago
4
event on `Redirect STDOUT/STDIN to network connection in container`

#184 h4l0gen closed 1 month ago
5
adding event on netcat rce in container

#183 h4l0gen closed 6 months ago
3
Added an event for default rule "Container drift detected using chmod"

#182 GLVSKiriti closed 6 months ago
3
Add an event for default rule "Container Drift Detcted"

#181 GLVSKiriti closed 6 months ago
1
adding event on `netcat remote code execution in container`

#180 h4l0gen closed 6 months ago
1
Add an event for default rule "Unexpected Inbound Connection Source"

#179 GLVSKiriti closed 1 month ago
5
Add an event for default rule "Launch Package Management Process In Container"

#178 GLVSKiriti closed 6 months ago
1