falcosecurity / event-generator

Generate a variety of suspect actions that are detected by Falco rulesets
Apache License 2.0
94 stars 40 forks source link

adding event on `potential local privillege escalation via environmental variables misuse` #146

Closed h4l0gen closed 8 months ago

h4l0gen commented 8 months ago

Motivation this rule suspect environment variable that could be attempting privilege escalation.

Feature we need an event for relying on falco to detect this rule

Alternatives

Additional context

h4l0gen commented 8 months ago

/assign