issues
search
threathunters-io
/
laurel
Transform Linux Audit logs for SIEM usage
GNU General Public License v3.0
688
stars
56
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Bump actions/download-artifact from 2.1.1 to 4.1.7 in /.github/workflows
#226
dependabot[bot]
opened
4 days ago
0
If 'file' is set to stdout, optionally specify a script to directly send to stdin.
#225
bobbintb
opened
1 week ago
2
License compliance with MPL2.0
#224
jorgehermo9
closed
2 weeks ago
6
[question] How to forward to or call another script/process.
#223
bobbintb
closed
1 week ago
4
SHA256 enrichment
#222
Ushakovaaa
opened
1 month ago
1
Don't fail setting log file ACLs with broken NSS backends
#221
hillu
closed
1 month ago
0
selinux: Allow laurel to connect to sytemd-machined
#220
hillu
closed
1 month ago
0
Updated INSTALL.md to include the re-labeling for the auditd plugin.
#219
sn0b4ll
closed
2 months ago
1
Use current stable Rust to build non-release version
#218
hillu
closed
3 months ago
0
Make filtering first event per process optional
#217
hillu
closed
3 months ago
0
selinux: Allow read-access to systemd's userdbd
#216
comawill
closed
4 months ago
0
Small test improvements
#215
hillu
closed
5 months ago
0
Add Laurel-generated JSON output corresponding to test records
#214
hillu
opened
5 months ago
0
Update dependencies
#213
hillu
closed
5 months ago
0
Fix enrich.uid_groups
#212
hillu
closed
5 months ago
0
Fix node name encoding
#211
hillu
closed
5 months ago
0
hostname translated to numbers in v0.6.0
#210
RomainPisters
closed
5 months ago
1
Improve error handling/reporting in laurel main binary
#209
hillu
closed
6 months ago
0
Parsing errors in the configuration file are not properly reported to the user.
#208
PrymalInstynct
closed
6 months ago
2
Cross-build for aarch64/glibc
#207
hillu
closed
3 months ago
4
test failure on big endian.
#206
plugwash
closed
6 months ago
0
time calculation overflow on 32-bit.
#205
plugwash
closed
6 months ago
0
Implement uid-groups enrichment
#204
hillu
closed
6 months ago
0
Change parser function to work on &[u8] instead of consuming Vec<u8>
#203
hillu
closed
6 months ago
0
Decouple serialization and JSON log format more clearly
#202
hillu
closed
6 months ago
0
stdout clarification
#201
bootlesshacker
closed
6 months ago
2
Eliminate extra types; keep Record + Key + Value
#200
hillu
closed
6 months ago
0
Fix SELinux policy for Debian and derivatives
#199
hillu
closed
6 months ago
0
SELinux Policy failing to install on Debian
#198
bootlesshacker
closed
6 months ago
4
Replace bencher with divan
#197
hillu
closed
6 months ago
0
Add more field types to Key::Common; change to binary search (parser)
#196
hillu
closed
7 months ago
0
Bump shlex from 1.2.0 to 1.3.0
#195
dependabot[bot]
closed
7 months ago
1
Update Cargo.lock
#194
hillu
closed
7 months ago
0
Implement filtering on individual raw audit records
#193
hillu
closed
7 months ago
0
Inherit container id from parent if cgroup info can't be read
#192
hillu
closed
8 months ago
0
Missing CONTAINER_INFO in a child process
#191
n9
closed
8 months ago
10
Advanced filtering (by regexes?)
#190
n9
closed
7 months ago
4
Various PID enrichment changes
#189
hillu
closed
8 months ago
0
PPID is not always generated
#188
n9
closed
8 months ago
3
Various parser fixes
#187
hillu
closed
8 months ago
0
Add LoongArch support
#186
212dandan
closed
8 months ago
1
"Typo" un/label_script in config.toml?
#185
n9
closed
8 months ago
2
Fix typos in config.toml
#184
n9
closed
8 months ago
1
coalesce::Settings: Don't borrow LabelMatcher instances
#183
hillu
closed
8 months ago
0
Hex-encode/decode the sha256 container ID
#182
hillu
closed
8 months ago
0
Fix typos in laurel-about.7.md
#181
n9
closed
8 months ago
1
aarch64 builds missing since v0.5.4
#180
MaZderMind
closed
3 months ago
7
Improve error handling, using thiserror, anyhow crates
#179
hillu
closed
8 months ago
0
Laurel does not aggregate all EXECVE events
#178
SolitudePy
opened
9 months ago
20
Enable build on other (non-Linux) Unix systems
#177
hillu
closed
9 months ago
0
Next