Mark Stemm 7dbdb00109 Also add endswith to lua parser (#443) ...

* Also add endswith to lua parser

Add endswith as a symbol so it can be parsed in filter expressions.

* Unit test for endswith support

Add a test case for endswith support, based on the filename ending with null.

2018-10-18 09:59:13 -07:00

..

rules_dir

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

append_single_rule.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

catchall_order.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

detect_connect_using_in.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

double_rule.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

empty_rules.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

endswith.yaml

Also add endswith to lua parser (#443)

2018-10-18 09:59:13 -07:00

falco_rules_warnings.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

invalid_rule_output.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_append_failure.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_append_false.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_append.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_order.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_sub_bare.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_sub_end.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_sub_front.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_sub_mid.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_sub_whitespace.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

list_substring.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

macro_append_failure.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

macro_append_false.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

macro_append.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

macro_order.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

null_output_field.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

override_list.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

override_macro.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

override_nested_list.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

override_rule.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

rule_append_failure.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

rule_append_false.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

rule_append.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

rule_names_with_spaces.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

rule_order.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

single_rule_enabled_flag.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

single_rule.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

skip_unknown_error.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

skip_unknown_evt.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

skip_unknown_prefix.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

skip_unknown_unspec.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

syscalls.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00

tagged_rules.yaml

Better copyright notices (#426)

2018-09-26 19:49:19 -07:00