threathunters-io laurel issues

threathunters-io / laurel

Transform Linux Audit logs for SIEM usage

GNU General Public License v3.0

688 stars 56 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Bump actions/download-artifact from 2.1.1 to 4.1.7 in /.github/workflows

#226 dependabot[bot] opened 4 days ago
0
If 'file' is set to stdout, optionally specify a script to directly send to stdin.

#225 bobbintb opened 1 week ago
2
License compliance with MPL2.0

#224 jorgehermo9 closed 2 weeks ago
6
[question] How to forward to or call another script/process.

#223 bobbintb closed 1 week ago
4
SHA256 enrichment

#222 Ushakovaaa opened 1 month ago
1
Don't fail setting log file ACLs with broken NSS backends

#221 hillu closed 1 month ago
0
selinux: Allow laurel to connect to sytemd-machined

#220 hillu closed 1 month ago
0
Updated INSTALL.md to include the re-labeling for the auditd plugin.

#219 sn0b4ll closed 2 months ago
1
Use current stable Rust to build non-release version

#218 hillu closed 3 months ago
0
Make filtering first event per process optional

#217 hillu closed 3 months ago
0
selinux: Allow read-access to systemd's userdbd

#216 comawill closed 4 months ago
0
Small test improvements

#215 hillu closed 5 months ago
0
Add Laurel-generated JSON output corresponding to test records

#214 hillu opened 5 months ago
0
Update dependencies

#213 hillu closed 5 months ago
0
Fix enrich.uid_groups

#212 hillu closed 5 months ago
0
Fix node name encoding

#211 hillu closed 5 months ago
0
hostname translated to numbers in v0.6.0

#210 RomainPisters closed 5 months ago
1
Improve error handling/reporting in laurel main binary

#209 hillu closed 6 months ago
0
Parsing errors in the configuration file are not properly reported to the user.

#208 PrymalInstynct closed 6 months ago
2
Cross-build for aarch64/glibc

#207 hillu closed 3 months ago
4
test failure on big endian.

#206 plugwash closed 6 months ago
0
time calculation overflow on 32-bit.

#205 plugwash closed 6 months ago
0
Implement uid-groups enrichment

#204 hillu closed 6 months ago
0
Change parser function to work on &[u8] instead of consuming Vec<u8>

#203 hillu closed 6 months ago
0
Decouple serialization and JSON log format more clearly

#202 hillu closed 6 months ago
0
stdout clarification

#201 bootlesshacker closed 6 months ago
2
Eliminate extra types; keep Record + Key + Value

#200 hillu closed 6 months ago
0
Fix SELinux policy for Debian and derivatives

#199 hillu closed 6 months ago
0
SELinux Policy failing to install on Debian

#198 bootlesshacker closed 6 months ago
4
Replace bencher with divan

#197 hillu closed 6 months ago
0
Add more field types to Key::Common; change to binary search (parser)

#196 hillu closed 7 months ago
0
Bump shlex from 1.2.0 to 1.3.0

#195 dependabot[bot] closed 7 months ago
1
Update Cargo.lock

#194 hillu closed 7 months ago
0
Implement filtering on individual raw audit records

#193 hillu closed 7 months ago
0
Inherit container id from parent if cgroup info can't be read

#192 hillu closed 8 months ago
0
Missing CONTAINER_INFO in a child process

#191 n9 closed 8 months ago
10
Advanced filtering (by regexes?)

#190 n9 closed 7 months ago
4
Various PID enrichment changes

#189 hillu closed 8 months ago
0
PPID is not always generated

#188 n9 closed 8 months ago
3
Various parser fixes

#187 hillu closed 8 months ago
0
Add LoongArch support

#186 212dandan closed 8 months ago
1
"Typo" un/label_script in config.toml?

#185 n9 closed 8 months ago
2
Fix typos in config.toml

#184 n9 closed 8 months ago
1
coalesce::Settings: Don't borrow LabelMatcher instances

#183 hillu closed 8 months ago
0
Hex-encode/decode the sha256 container ID

#182 hillu closed 8 months ago
0
Fix typos in laurel-about.7.md

#181 n9 closed 8 months ago
1
aarch64 builds missing since v0.5.4

#180 MaZderMind closed 3 months ago
7
Improve error handling, using thiserror, anyhow crates

#179 hillu closed 8 months ago
0
Laurel does not aggregate all EXECVE events

#178 SolitudePy opened 9 months ago
20
Enable build on other (non-Linux) Unix systems

#177 hillu closed 9 months ago
0