falcosecurity event-generator issues

falcosecurity / event-generator

Generate a variety of suspect actions that are detected by Falco rulesets

Apache License 2.0

94 stars 40 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

fix(decl): potential nil ptr deref and shell script SIGUSR handling

#243 ekoops opened 10 hours ago
1
feat(decl/proc-chain): add user and capabilities support

#242 ekoops closed 11 hours ago
2
feat(decl): add process test resource and kill system call test step

#241 ekoops closed 6 days ago
4
feat(decl/cmd/test): add report format flag

#240 ekoops closed 6 days ago
2
feat(decl): add test command support

#239 ekoops closed 1 week ago
2
fix(decl): use SetUint for open_mode uint32 field

#238 jacalvo closed 2 weeks ago
8
feat(decl): add CLI support to run declarative tests

#237 ekoops closed 2 weeks ago
2
feat(decl/runners): add host runner and test serialization support

#236 ekoops closed 3 weeks ago
2
feat(decl/tests): add declarative test support

#235 ekoops closed 3 weeks ago
2
feat(decl/resources): adds fd test resource and test resource builder

#234 ekoops closed 3 weeks ago
3
update(ci): use arm64 CNCF runners for GH actions

#233 ekoops closed 1 month ago
2
feat(decl/resources): introduce test resource concept and clientServer resource

#232 ekoops closed 1 month ago
2
feat(decl): add declarative test framework foundation

#231 ekoops closed 1 month ago
2
Ekoops/declarative

#230 ekoops closed 1 month ago
1
add linter

#229 alacuku closed 1 month ago
3
build: fix cross-compilation

#228 jacalvo closed 1 month ago
3
chore(dockerignore): use white-list approach

#227 ekoops closed 1 month ago
3
Docs: update for v0.12

#226 leogr closed 1 month ago
3
Implement a way to select action groups, based on rules maturity (stable, incubating, sandbox)

#225 leogr opened 1 month ago
0
increase timeout for syscall.DisallowedSSHConnectionNonStandardPort

#224 prezha closed 2 months ago
2
Fix disallowed ssh

#223 prezha closed 2 months ago
1
Disable not stable rules

#222 leogr closed 2 months ago
1
`syscall.DisallowedSSHConnectionNonStandardPort` does not trigger

#221 leogr closed 2 months ago
1
fix: Enhance Falco syscall events triggering and reliability

#220 prezha closed 2 months ago
12
Feature: Added declarative subcommand for test command

#219 GLVSKiriti closed 3 months ago
2
Feat: Add helper functions for making syscalls

#218 GLVSKiriti closed 3 months ago
3
feat(declarative): Implement ExecuteStep method for the container runner

#217 GLVSKiriti closed 3 months ago
3
Feature: Add Container runner support for declarative yaml file testing method

#216 GLVSKiriti closed 4 months ago
3
Feature: Add Container runner support for declarative yaml file testing method

#215 GLVSKiriti closed 4 months ago
1
vote: docs(OWNERS): add alacuku (Aldo Lacuku) to approvers

#214 alacuku closed 5 months ago
5
Create a new branch for gSoC 2024

#213 alacuku closed 5 months ago
1
event-generator launched through helm chart, can't run k8saudit tests

#212 alfredomagallon closed 4 weeks ago
4
Feature: Add support for testing falco rules using declarative YAML files in event-generator

#211 GLVSKiriti closed 5 months ago
4
[hold] Update K8saudit actions

#210 leogr opened 6 months ago
4
adding an event on `java process class file download`

#209 h4l0gen closed 7 months ago
2
Fix: In ExecutionFromDevShm we should use os.Mkdir("/dev") instead if os.Mkdir("/dev/shm")

#208 GLVSKiriti closed 7 months ago
2
adding event for this rule `mount launched in privileged container`

#207 h4l0gen closed 6 months ago
5
adding an event on rule `exfiltrating artifacts via kubernetes control plane` with the utility of creating `kind cluster`

#206 h4l0gen opened 7 months ago
6
creating an event on `mount launched in privileged container`

#205 h4l0gen closed 7 months ago
2
event on enabled incubating rule `Mount launched in privileged container`

#204 h4l0gen closed 6 months ago
1
Added an event for default stable rule Detect release_agent File Container Escapes

#203 GLVSKiriti closed 4 months ago
7
Fix: Use events.ErrSkipped with a proper Reason when skipping an actions

#202 GLVSKiriti closed 7 months ago
2
Use `events.ErrSkipped` with a proper `Reason` when skipping an actions

#201 leogr closed 7 months ago
5
event on `update_package_repository`

#200 h4l0gen opened 7 months ago
14
adding an event on `unexpected_k8s_nodeport_connection`

#199 h4l0gen opened 7 months ago
4
new(pkg/runner/helper): added SpawnAsWithSymlink and modified SpawnAs to make a copy

#198 loresuso closed 7 months ago
3
update(events/helper): add the DoNothing helper

#197 loresuso closed 7 months ago
3
Added an event for default stable rule 'Drop and execute new binary in container'

#196 GLVSKiriti closed 7 months ago
7
Add an event for default stable rule "Drop and execute new binary in container"

#195 GLVSKiriti closed 7 months ago
0
docs(events/README.md): update conventions

#194 leogr closed 8 months ago
1