issues
search
falcosecurity
/
rules
Falco rule repository
https://falcosecurity.github.io/rules/
Apache License 2.0
93
stars
68
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
cleanup(rules): initial tagging of sandbox or incubating rules round2
#112
incertum
closed
1 year ago
3
cleanup(rules): initial tagging of sandbox or incubating rules round1
#111
incertum
closed
1 year ago
3
cleanup(rules): initial tagging of stable rules round4
#110
incertum
closed
1 year ago
3
cleanup(rules): initial tagging of stable rules round3
#109
incertum
closed
1 year ago
3
cleanup(rules): initial tagging of stable rules round2
#108
incertum
closed
1 year ago
3
fix(ci): solve issues with docker
#107
jasondellaluce
closed
1 year ago
2
cleanup(rules): initial tagging of stable rules round1
#106
incertum
closed
1 year ago
3
Add artifact signature information to the generated index
#105
maxgio92
closed
1 year ago
6
Create files below dev - custom rules definition not working
#104
unktone
closed
1 year ago
1
cleanup(rules): initial transitions of some sandbox rules to incubating
#103
incertum
closed
1 year ago
5
cleanup(rules): initially tag all rules disabled by default w/ maturity_sandbox level
#102
incertum
closed
1 year ago
3
[TRACKING] Tag Falco rules according to rules maturity framework and compliance use case if applicable
#101
incertum
closed
1 year ago
2
Add Signature section to index files generated by GHA
#100
LucaGuerra
closed
1 year ago
1
perhaps a typeo in the word contains
#99
unktone
closed
1 year ago
1
new(rules): add rule for detecting fileless execution via memfd_create
#98
loresuso
closed
1 year ago
13
Wrong config safe_etc_dirs in falco_rules.yaml
#97
karkill
closed
7 months ago
5
Implement key aspects of the rule maturity framework for Falco Rules 2.x
#96
LucaGuerra
closed
1 year ago
1
[Discussion] Creation and tagging of PCI DSS Falco rules
#95
incertum
closed
1 year ago
3
update(ci): support validating and comparing plugin rules
#94
jasondellaluce
closed
1 year ago
3
Support azurefile-csi as known_aks_mount_in_privileged_containers
#93
kellybirr
closed
1 year ago
3
Support azurefile-csi as known_aks_mount_in_privileged_containers
#92
kellybirr
closed
1 year ago
6
FN for rule "Detect release_agent File Container Escapes"
#91
SoOM3a
closed
7 months ago
7
Add filter on event result field in `spawned_process` macro
#90
Biagio-Dipalma
closed
7 months ago
14
update: sync for falco rules v1.0.1
#89
jasondellaluce
closed
1 year ago
4
Proposal: Mitre Att&ck Checker library for Falco Rules
#88
IceManGreen
closed
1 month ago
15
Detection for CVE-2023-0669 Goanywhere-MFT Exploit - CISA KEV Alert
#87
Loginsoft-Research
closed
10 months ago
6
cleanup(rules_inventory): update rules overview 2023-06-13
#86
incertum
closed
1 year ago
2
Exploit Detection for CVE-2023-33246 - RocketMQ
#85
Loginsoft-Research
closed
5 months ago
11
falco rules tags do not satisfy the MITRE ATT&CK framework v13
#84
IceManGreen
closed
11 months ago
9
fix(rules/falco_rules): solve shadowing issues with "Drop and execute new binary in container"
#83
jasondellaluce
closed
1 year ago
12
update(rules): add rules for PKT mining pools
#82
blampe
closed
9 months ago
12
vote: update(OWNERS): add incertum (Melissa Kilby) to approvers
#81
incertum
closed
1 year ago
7
update(ci:): validate rules on every main push
#80
jasondellaluce
closed
1 year ago
2
fix(ci): publish a version check comment event with no changes
#79
jasondellaluce
closed
1 year ago
2
docs(RELEASE.md): update versioning guidelines for patch releases
#78
jasondellaluce
closed
1 year ago
2
update(ci): add falco v0.35 to CI checks
#77
jasondellaluce
closed
1 year ago
2
new(proposals): rules adoption, management and maturity framework
#76
incertum
closed
1 year ago
6
docs(README.md): add scope and status badges
#75
leogr
closed
1 year ago
1
chore(rules/falco_rules.yaml): fix comment
#74
jasondellaluce
closed
1 year ago
5
fix(ci): fix http request body in create-comment
#73
jasondellaluce
closed
1 year ago
2
fix(ci): skip rules jobs when no rule is changed
#72
jasondellaluce
closed
1 year ago
4
fix(ci): solve issues with create-comment
#71
jasondellaluce
closed
1 year ago
2
chore(rules/falco_rules.yaml): fix space
#70
jasondellaluce
closed
1 year ago
2
recognize azurefile-csi
#69
kellybirr
closed
1 year ago
2
update: avoid write below etc to trigger with falcoctl
#68
loresuso
closed
1 year ago
2
update: add extra CI checks for rules changes
#67
jasondellaluce
closed
1 year ago
7
Introduce OCI artifacts signatures
#66
maxgio92
closed
1 year ago
11
Sign the OCI artifact with cosign
#65
maxgio92
closed
1 year ago
3
feat(build/registry): return built oci artifact digest
#64
maxgio92
closed
1 year ago
4
Make the build tool return the OCI artifact digest
#63
maxgio92
closed
1 year ago
1
Previous
Next