github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-10-21 19:44:57 +00:00
Code Issues Projects Releases Wiki Activity
Files
d678be5579674e057e5c82f2f8b3709118716b88
falco/test/rules
History
Chuck Schweizer d678be5579 Adding user.loginuid to the default falco rules in any place user.name exists 
This update will provide information as to which process uid intitiated the event.  This is really important for processes that are started
by a different user name.

Signed-off-by: Chuck Schweizer <chuck.schweizer.lvk2@statefarm.com>
2020-08-28 10:02:19 +02:00
..
k8s_audit
Add backward compat test for v4 k8s audit
2019-10-21 08:09:28 -07:00
rules_dir
update: license headers
2019-10-08 16:02:26 +02:00
append_single_rule.yaml
update: license headers
2019-10-08 16:02:26 +02:00
catchall_order.yaml
update: license headers
2019-10-08 16:02:26 +02:00
detect_connect_using_in.yaml
Adding user.loginuid to the default falco rules in any place user.name exists
2020-08-28 10:02:19 +02:00
double_rule.yaml
update: license headers
2019-10-08 16:02:26 +02:00
empty_rules.yaml
update: license headers
2019-10-08 16:02:26 +02:00
endswith.yaml
update: license headers
2019-10-08 16:02:26 +02:00
engine_version_mismatch.yaml
update: license headers
2019-10-08 16:02:26 +02:00
falco_rules_warnings.yaml
update: license headers
2019-10-08 16:02:26 +02:00
invalid_append_macro_dangling.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_append_macro_multiple_docs.yaml
New tests for handling multi-doc files
2019-08-02 11:01:59 -07:00
invalid_append_macro.yaml
Addl test for validation across files
2019-07-31 11:22:38 +02:00
invalid_append_rule_multiple_docs.yaml
New tests for handling multi-doc files
2019-08-02 11:01:59 -07:00
invalid_append_rule_without_condition.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_append_rule.yaml
Addl test for validation across files
2019-07-31 11:22:38 +02:00
invalid_array_item_not_object.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_base_macro.yaml
Addl test for validation across files
2019-07-31 11:22:38 +02:00
invalid_base_rule.yaml
Addl test for validation across files
2019-07-31 11:22:38 +02:00
invalid_condition_not_rule.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_engine_version_not_number.yaml
update: license headers
2019-10-08 16:02:26 +02:00
invalid_list_without_items.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_macro_comple_error.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_macro_without_condition.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_missing_list_name.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_missing_macro_name.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_missing_rule_name.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_not_array.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_not_yaml.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_overwrite_macro_multiple_docs.yaml
New tests for handling multi-doc files
2019-08-02 11:01:59 -07:00
invalid_overwrite_macro.yaml
Addl test for validation across files
2019-07-31 11:22:38 +02:00
invalid_overwrite_rule_multiple_docs.yaml
New tests for handling multi-doc files
2019-08-02 11:01:59 -07:00
invalid_overwrite_rule.yaml
Addl test for validation across files
2019-07-31 11:22:38 +02:00
invalid_rule_output.yaml
update: license headers
2019-10-08 16:02:26 +02:00
invalid_rule_without_output.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_unexpected_object.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
invalid_yaml_parse_error.yaml
Add new tests for validating rules files
2019-07-11 11:24:22 -07:00
list_append_failure.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_append_false.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_append.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_order.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_sub_bare.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_sub_end.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_sub_front.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_sub_mid.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_sub_whitespace.yaml
update: license headers
2019-10-08 16:02:26 +02:00
list_substring.yaml
update: license headers
2019-10-08 16:02:26 +02:00
macro_append_failure.yaml
update: license headers
2019-10-08 16:02:26 +02:00
macro_append_false.yaml
update: license headers
2019-10-08 16:02:26 +02:00
macro_append.yaml
update: license headers
2019-10-08 16:02:26 +02:00
macro_order.yaml
update: license headers
2019-10-08 16:02:26 +02:00
multiple_docs.yaml
update: license headers
2019-10-08 16:02:26 +02:00
null_output_field.yaml
update: license headers
2019-10-08 16:02:26 +02:00
override_list.yaml
update: license headers
2019-10-08 16:02:26 +02:00
override_macro.yaml
update: license headers
2019-10-08 16:02:26 +02:00
override_nested_list.yaml
update: license headers
2019-10-08 16:02:26 +02:00
override_rule.yaml
update: license headers
2019-10-08 16:02:26 +02:00
rule_append_failure.yaml
update: license headers
2019-10-08 16:02:26 +02:00
rule_append_false.yaml
update: license headers
2019-10-08 16:02:26 +02:00
rule_append.yaml
update: license headers
2019-10-08 16:02:26 +02:00
rule_names_with_regex_chars.yaml
update: license headers
2019-10-08 16:02:26 +02:00
rule_names_with_spaces.yaml
update: license headers
2019-10-08 16:02:26 +02:00
rule_order.yaml
update: license headers
2019-10-08 16:02:26 +02:00
single_rule_enabled_flag.yaml
update: license headers
2019-10-08 16:02:26 +02:00
single_rule.yaml
update: license headers
2019-10-08 16:02:26 +02:00
skip_unknown_error.yaml
update: license headers
2019-10-08 16:02:26 +02:00
skip_unknown_evt.yaml
update: license headers
2019-10-08 16:02:26 +02:00
skip_unknown_prefix.yaml
update: license headers
2019-10-08 16:02:26 +02:00
skip_unknown_unspec.yaml
update: license headers
2019-10-08 16:02:26 +02:00
syscalls.yaml
update: license headers
2019-10-08 16:02:26 +02:00
tagged_rules.yaml
update: license headers
2019-10-08 16:02:26 +02:00