Lorenzo Susini e47ece4de9 update(userspace/engine): address jasondellaluce comments ...

- avoiding inspector to be allocated for each rule
- use two boolean values for expecting macros and lists
- move items of lists alongside name, under info
- use snake case for json output, like we do for e.g alerts
- correctly retrieve evt names
- consider two levels of lists for exception operators

Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com>

2023-05-19 15:56:05 +02:00

..

banned.h

feat(userspace): Add BAN_ALTERNATIVE macro to banned.h.

2020-02-13 18:01:39 +01:00

CMakeLists.txt

new(userspace/engine): introduce new class to get details about rules

2023-05-19 15:56:05 +02:00

evttype_index_ruleset.cpp

update(userspace): make sure that async event is always matched in rules

2023-05-19 12:15:04 +02:00

evttype_index_ruleset.h

update(userspace/engine): support searching ppm_sc events in rulesets

2023-03-09 09:39:12 +01:00

falco_common.cpp

fix(userspace): avoid using std namespace in sources

2023-02-08 15:30:29 +01:00

falco_common.h

update: adapt Falco to new sinsp event source management

2023-04-26 12:59:13 +02:00

falco_engine_version.h

update(userspace/engine): bump engine checksum

2023-05-19 12:15:04 +02:00

falco_engine.cpp

update(userspace/engine): address jasondellaluce comments

2023-05-19 15:56:05 +02:00

falco_engine.h

update(userspace/engine): address jasondellaluce comments

2023-05-19 15:56:05 +02:00

falco_load_result.cpp

Add a load result interface for use in new load_rules methods

2022-08-04 14:49:23 +02:00

falco_load_result.h

fix(userspace): add explicit constructors and initializations

2022-10-03 13:04:15 +02:00

falco_rule.h

fix(userspace): add explicit constructors and initializations

2022-10-03 13:04:15 +02:00

falco_source.h

Also copy ruleset when copying falco source

2022-12-01 17:07:52 +01:00

falco_utils.cpp

refactor: adapt event set configuration changes to new libs definition

2023-02-21 14:31:28 +01:00

falco_utils.h

refactor: adapt event set configuration changes to new libs definition

2023-02-21 14:31:28 +01:00

filter_details_resolver.cpp

update(userspace/engine): address jasondellaluce comments

2023-05-19 15:56:05 +02:00

filter_details_resolver.h

update(userspace/engine): address jasondellaluce comments

2023-05-19 15:56:05 +02:00

filter_macro_resolver.cpp

fix(userspace): avoid using std namespace in sources

2023-02-08 15:30:29 +01:00

filter_macro_resolver.h

chore: fix typo

2022-12-13 15:06:10 +01:00

filter_ruleset.h

update(userspace/engine): support searching ppm_sc events in rulesets

2023-03-09 09:39:12 +01:00

filter_warning_resolver.cpp

fix(userspace): avoid using std namespace in sources

2023-02-08 15:30:29 +01:00

filter_warning_resolver.h

update(userspace) fix cppcheck warnings

2022-10-12 12:07:20 +02:00

formats.cpp

fix(userspace): avoid using std namespace in sources

2023-02-08 15:30:29 +01:00

formats.h

update(userspace/engine): avoid relying on leaked std namespace

2023-02-08 15:30:29 +01:00

indexed_vector.h

fix(userspace/engine): add missing include

2023-02-14 17:33:31 +01:00

json_evt.cpp

Improve Falco engine performance when loading rules and creating the rule sets

2022-09-05 17:42:31 +02:00

json_evt.h

update(userspace/engine): adapt engine classes to new libsinsp event definitions

2023-02-21 14:31:28 +01:00

OWNERS

docs: specify labels that apply to each area

2019-09-16 10:11:25 +02:00

rule_loader_collector.cpp

fix(userspace): add explicit constructors and initializations

2022-10-03 13:04:15 +02:00

rule_loader_collector.h

fix(userspace): add explicit constructors and initializations

2022-10-03 13:04:15 +02:00

rule_loader_compiler.cpp

update(userspace/engine): better modularize the code for getting json details

2023-05-19 15:56:05 +02:00

rule_loader_compiler.h

fix(userspace): add explicit constructors and initializations

2022-10-03 13:04:15 +02:00

rule_loader_reader.cpp

fix(userspace): avoid using std namespace in sources

2023-02-08 15:30:29 +01:00

rule_loader_reader.h

fix(userspace): add explicit constructors and initializations

2022-10-03 13:04:15 +02:00

rule_loader.cpp

fix(userspace/engine): absolute rule condition position in validation context

2023-01-10 12:55:43 +01:00

rule_loader.h

update(userspace/engine): better modularize the code for getting json details

2023-05-19 15:56:05 +02:00

stats_manager.cpp

fix(userspace): avoid using std namespace in sources

2023-02-08 15:30:29 +01:00

stats_manager.h

update(userspace/engine): avoid relying on leaked std namespace

2023-02-08 15:30:29 +01:00