search

falcosecurity / plugins

Falco plugins registry
Apache License 2.0
82 stars 75 forks source link

Clean up GCP Audit Logs rules file #391

Closed mikegcoleman closed 8 months ago

mikegcoleman commented 8 months ago

Describe the bug

The rules file for GCP audit logs needs to be cleaned up a bit. There are some weird references to Datadog (maybe they are supposed to be there?), misspelled words, duplicate rules output that don't seem to make sense (A vm has been stopped message when someone updates a VM), and a few grammatical things.

How to reproduce it

Read the rules file :)

Expected behaviour

Screenshots

Environment

Additional context

poiana commented 8 months ago

@mikegcoleman: GitHub didn't allow me to assign the following users: me.

Note that only falcosecurity members with read permissions, repo collaborators and people who have commented on this issue/PR can be assigned. Additionally, issues/PRs can only have 10 assignees at the same time. For more information please see the contributor guide

In response to [this](https://github.com/falcosecurity/plugins/issues/391#issuecomment-1874893696): >/assign me Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
mikegcoleman commented 8 months ago

/assign mikegcoleman