Mark Stemm b9d0857362 Rule updates related to other security products ...

This is a rework of a PR made by @juju4 that had a bunch of additions
related to running other security/monitoring products, including aide,
bro, icinga2, nagios, ansible, etc.

This overlapped a lot with changes I had been making to reduce
noisiness, so rather than have @juju4 deal with the conflicts I took the
changes and made a separate commit with the non-conflicting additions.

A summary of the changes:
 - Add docker-compose as a docker binary.
 - Add showq/critical-stack as setuid binaries.
 - Add lxd binaries
 - Add some additional package management binaries.
 - Add support for host intrustion detection systems like aide.
 - Add support for network intrustion detections systems like bro.
 - Add support for monitoring systems like nagios, icinga2, npcd.
 - Other one-off additions to other lists of mail/etc programs.

2017-02-01 16:25:50 -08:00

..

CMakeLists.txt

Install falco rules with configurable filename.

2016-10-24 15:56:45 -07:00

falco_rules.yaml

Rule updates related to other security products

2017-02-01 16:25:50 -08:00