|
.github/workflows
|
Update codeql.yml workflow name
|
2024-02-13 11:16:21 -05:00 |
|
build
|
Resolve cr comments
|
2024-03-29 13:41:39 -05:00 |
|
conf/outconf.d
|
Add Fluent event output writer to integrate AUOMS with OneAgent (#43)
|
2020-03-27 16:50:37 -07:00 |
|
installer
|
Cherry config and UTs
|
2024-09-12 11:07:33 -05:00 |
|
.gitignore
|
Install ipxutils
|
2023-08-28 11:03:45 -04:00 |
|
AbstractEventWriter.cpp
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
AbstractEventWriter.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
AuditRules.cpp
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
AuditRules.h
|
Add stdexcept to AuditRules.h
|
2023-08-28 16:24:19 -04:00 |
|
AuditRulesMonitor.cpp
|
Cmdline Redaction rule changes (#77)
|
2021-05-21 12:56:55 -07:00 |
|
AuditRulesMonitor.h
|
Fix backlog_wait_time check/update logic (#66)
|
2020-12-16 14:15:01 -08:00 |
|
AuditStatus.cpp
|
Convert to new priority queue design
|
2020-04-08 13:15:21 -07:00 |
|
AuditStatus.h
|
Convert to new priority queue design
|
2020-04-08 13:15:21 -07:00 |
|
CGroups.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
CGroups.h
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
CMakeLists.txt
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
CPULimits.cpp
|
Tweak cgroup logic
|
2020-09-08 11:21:30 -07:00 |
|
CPULimits.h
|
Set cgroup defaults, add some audit multicast support
|
2020-09-01 12:11:41 -07:00 |
|
Cache.h
|
Fix RawEventAccumulator (#48)
|
2020-06-24 15:05:04 -07:00 |
|
CmdlineRedactor.cpp
|
Add support for Mariner and bug fixes (#81)
|
2021-07-28 12:17:46 -07:00 |
|
CmdlineRedactor.h
|
Add support for Mariner and bug fixes (#81)
|
2021-07-28 12:17:46 -07:00 |
|
CmdlineRedactorTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
CollectionMonitor.cpp
|
Remove active check in auditd install validation
|
2024-05-21 08:29:18 -05:00 |
|
CollectionMonitor.h
|
Add support from sysv and upstart
|
2024-03-29 10:45:04 -05:00 |
|
Config.cpp
|
Add Cmdline Redaction support (#71)
|
2021-02-11 07:59:35 -08:00 |
|
Config.h
|
Tweak event prioritization logic and defaults
|
2020-08-27 15:21:38 -07:00 |
|
ConfigTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
Defer.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
Event.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
Event.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
EventAggregator.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
EventAggregator.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
EventAggregatorTests.cpp
|
Drop 2 test cases
|
2024-09-19 10:03:55 -05:00 |
|
EventFilter.cpp
|
Fix proc filter (#74)
|
2021-04-01 16:19:33 -07:00 |
|
EventFilter.h
|
Patched so outputs can be added and removed and ProcessTree and GLobalFiltersMask are updated each time (#40)
|
2020-01-07 11:42:41 -08:00 |
|
EventId.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
EventMatcher.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
EventMatcher.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
EventMatcherTests.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
EventPrioritizer.cpp
|
Cmdline Redaction rule changes (#77)
|
2021-05-21 12:56:55 -07:00 |
|
EventPrioritizer.h
|
Tweak event prioritization logic and defaults
|
2020-08-27 15:21:38 -07:00 |
|
EventProcessorTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
EventQueue.h
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
EventTests.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
EventWriterConfig.cpp
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
EventWriterConfig.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
ExecUtil.cpp
|
Cleanup compile warnings (#97)
|
2022-07-20 12:42:18 -07:00 |
|
ExecUtil.h
|
Convert to new priority queue design
|
2020-04-08 13:15:21 -07:00 |
|
ExecveConverter.cpp
|
Add missing copyright headers
|
2020-08-24 14:22:29 -07:00 |
|
ExecveConverter.h
|
Add missing copyright headers
|
2020-08-24 14:22:29 -07:00 |
|
ExecveConverterTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
FieldType.h
|
Add missing copyright headers
|
2020-08-24 14:22:29 -07:00 |
|
FileUtils.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
FileUtils.h
|
Add Cmdline Redaction support (#71)
|
2021-02-11 07:59:35 -08:00 |
|
FileWatcher.cpp
|
Add missing copyright headers
|
2020-08-24 14:22:29 -07:00 |
|
FileWatcher.h
|
Add missing copyright headers
|
2020-08-24 14:22:29 -07:00 |
|
FiltersEngine.cpp
|
Fix ProcessTree data race issues (#75)
|
2021-04-19 08:51:25 -07:00 |
|
FiltersEngine.h
|
Patched so outputs can be added and removed and ProcessTree and GLobalFiltersMask are updated each time (#40)
|
2020-01-07 11:42:41 -08:00 |
|
FluentEventWriter.cpp
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
FluentEventWriter.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
FluentEventWriterTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
Gate.h
|
Set cgroup defaults, add some audit multicast support
|
2020-09-01 12:11:41 -07:00 |
|
IEventFilter.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
IEventReader.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
IEventWriter.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
IO.cpp
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
IO.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
Input.cpp
|
Fix signal handling, silence spurious error (#67)
|
2020-12-16 14:15:47 -08:00 |
|
Input.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
InputBuffer.h
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
Inputs.cpp
|
Merge remaining release_2.1 branch bug fixes (#45)
|
2020-06-19 12:11:31 -07:00 |
|
Inputs.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
Interpret.cpp
|
Reference for linux/ipx.h
|
2023-08-28 16:00:14 -04:00 |
|
Interpret.h
|
Feature 3.0 (#27)
|
2019-04-30 12:06:02 -07:00 |
|
KernelInfo.cpp
|
Set cgroup defaults, add some audit multicast support
|
2020-09-01 12:11:41 -07:00 |
|
KernelInfo.h
|
Set cgroup defaults, add some audit multicast support
|
2020-09-01 12:11:41 -07:00 |
|
LICENSE
|
Initial code commit
|
2016-11-18 12:02:01 -08:00 |
|
LockFile.cpp
|
Cleanup compile warnings (#97)
|
2022-07-20 12:42:18 -07:00 |
|
LockFile.h
|
Trigger queue reset on upgrade
|
2020-05-22 10:39:27 -07:00 |
|
Logger.cpp
|
Cleanup compile warnings (#97)
|
2022-07-20 12:42:18 -07:00 |
|
Logger.h
|
Add log metrics (#65)
|
2021-02-11 08:17:46 -08:00 |
|
MachineType.h
|
Bug fixes and add support for arm64 (#35)
|
2019-08-07 07:20:30 -07:00 |
|
Metrics.cpp
|
Cleanup compile warnings (#97)
|
2022-07-20 12:42:18 -07:00 |
|
Metrics.h
|
Add log metrics (#65)
|
2021-02-11 08:17:46 -08:00 |
|
Netlink.cpp
|
Set cgroup defaults, add some audit multicast support
|
2020-09-01 12:11:41 -07:00 |
|
Netlink.h
|
Set cgroup defaults, add some audit multicast support
|
2020-09-01 12:11:41 -07:00 |
|
NetlinkAudit.cpp
|
Feature 3.0 (#27)
|
2019-04-30 12:06:02 -07:00 |
|
OMSEventWriter.cpp
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
OMSEventWriter.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
OMSEventWriterTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
OperationalStatus.cpp
|
Cleanup compile warnings (#97)
|
2022-07-20 12:42:18 -07:00 |
|
OperationalStatus.h
|
Cmdline Redaction rule changes (#77)
|
2021-05-21 12:56:55 -07:00 |
|
OperationalStatusTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
Output.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
Output.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
OutputInputTests.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
Outputs.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
Outputs.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
PriorityQueue.cpp
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
PriorityQueue.h
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
PriorityQueueTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
ProcFilter.cpp
|
Kesheldr syscall filter ng (#38)
|
2019-10-07 15:58:47 +01:00 |
|
ProcFilter.h
|
Add Cmdline Redaction support (#71)
|
2021-02-11 07:59:35 -08:00 |
|
ProcMetrics.cpp
|
Tweak mem limits logic
|
2020-08-25 11:23:05 -07:00 |
|
ProcMetrics.h
|
Tweak mem limits logic
|
2020-08-25 11:23:05 -07:00 |
|
ProcessDefines.h
|
Kesheldr syscall filter ng (#38)
|
2019-10-07 15:58:47 +01:00 |
|
ProcessInfo.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
ProcessInfo.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
ProcessTree.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
ProcessTree.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
ProcessTreeTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
Queue.cpp
|
Fix Queue and Event Parse bugs
|
2020-04-29 12:05:24 -07:00 |
|
Queue.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
QueueTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
README.md
|
Update README.md
|
2019-08-07 07:42:05 -07:00 |
|
RawEventAccumulator.cpp
|
Include USER_CMD redaction (#80)
|
2021-06-14 15:52:25 -07:00 |
|
RawEventAccumulator.h
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
RawEventProcessor.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
RawEventProcessor.h
|
Include USER_CMD redaction (#80)
|
2021-06-14 15:52:25 -07:00 |
|
RawEventReader.h
|
Merge remaining release_2.1 branch bug fixes (#45)
|
2020-06-19 12:11:31 -07:00 |
|
RawEventRecord.cpp
|
Cleanup compile warnings (#97)
|
2022-07-20 12:42:18 -07:00 |
|
RawEventRecord.h
|
Fix audit record parsing (#72)
|
2021-03-29 15:20:18 -07:00 |
|
RawEventWriter.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
RecordType.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
Retry.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
RunBase.cpp
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
RunBase.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
SECURITY.md
|
Microsoft mandatory file (#100)
|
2022-09-30 12:11:31 -07:00 |
|
SPSCDataQueue.cpp
|
Fix bugs in SPSCDataQueue and PriorityQueue
|
2020-08-26 12:30:18 -07:00 |
|
SPSCDataQueue.h
|
Add IO metrics, bug fixes
|
2020-08-24 10:10:32 -07:00 |
|
SPSCDataQueueTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
SchedPriority.cpp
|
Add CPULimits and fixes
|
2020-06-10 13:09:59 -07:00 |
|
SchedPriority.h
|
Add CPULimits and fixes
|
2020-06-10 13:09:59 -07:00 |
|
Signals.cpp
|
Improve rule parsing, fix bugs (#28)
|
2019-05-09 13:34:17 -07:00 |
|
Signals.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
StdinReader.cpp
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
StdinReader.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
StdoutWriter.h
|
Added support for receiver ack to control cursor
|
2017-09-29 16:25:45 -07:00 |
|
StringTable.h
|
Feature 3.0 (#27)
|
2019-04-30 12:06:02 -07:00 |
|
StringTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
StringUtils.cpp
|
Cmdline Redaction rule changes (#77)
|
2021-05-21 12:56:55 -07:00 |
|
StringUtils.h
|
Cmdline Redaction rule changes (#77)
|
2021-05-21 12:56:55 -07:00 |
|
SyscallMetrics.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
SyscallMetrics.h
|
Add metrics collection and other changes (#36)
|
2019-11-21 14:55:06 -08:00 |
|
SyslogEventWriter.cpp
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
SyslogEventWriter.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
SystemMetrics.cpp
|
Add IO metrics, bug fixes
|
2020-08-24 10:10:32 -07:00 |
|
SystemMetrics.h
|
Add IO metrics, bug fixes
|
2020-08-24 10:10:32 -07:00 |
|
THIRD_PARTY_IP_NOTICE
|
Rework plugin to support multi-home configuration
|
2017-05-22 04:13:32 -07:00 |
|
TempDir.cpp
|
Eliminate compiler warnings minor build tweak. (#33)
|
2019-07-25 14:16:49 -07:00 |
|
TempDir.h
|
Initial code commit
|
2016-11-18 12:02:01 -08:00 |
|
TempFile.cpp
|
Eliminate compiler warnings minor build tweak. (#33)
|
2019-07-25 14:16:49 -07:00 |
|
TempFile.h
|
Initial code commit
|
2016-11-18 12:02:01 -08:00 |
|
TestEventData.cpp
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
TestEventData.h
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
TestEventQueue.h
|
Fix IO:DiscardAll bug and cgroup limits
|
2020-11-16 16:42:26 -08:00 |
|
TestEventWriter.h
|
Made output format code changes (#87)
|
2021-10-19 15:14:56 -07:00 |
|
Translate.h
|
Tweak event prioritization logic and defaults
|
2020-08-27 15:21:38 -07:00 |
|
TranslateArch.cpp
|
Bug fixes and add support for arm64 (#35)
|
2019-08-07 07:20:30 -07:00 |
|
TranslateErrno.cpp
|
Improve rule parsing, fix bugs (#28)
|
2019-05-09 13:34:17 -07:00 |
|
TranslateField.cpp
|
Feature 3.0 (#27)
|
2019-04-30 12:06:02 -07:00 |
|
TranslateFieldType.cpp
|
Kesheldr syscall filter ng (#38)
|
2019-10-07 15:58:47 +01:00 |
|
TranslateRecordType.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
TranslateSyscall.cpp
|
Add runtime_error class reference
|
2023-08-25 11:45:44 -04:00 |
|
UnixDomainListener.cpp
|
Add support for abstract UDS addresses (#90)
|
2021-11-17 13:24:57 -08:00 |
|
UnixDomainListener.h
|
Feature 3.0 (#27)
|
2019-04-30 12:06:02 -07:00 |
|
UnixDomainWriter.cpp
|
Add support for abstract UDS addresses (#90)
|
2021-11-17 13:24:57 -08:00 |
|
UnixDomainWriter.h
|
Added support for receiver ack to control cursor
|
2017-09-29 16:25:45 -07:00 |
|
UserDB.cpp
|
Revert file perm changes
|
2024-03-28 07:05:26 -05:00 |
|
UserDB.h
|
Improve rule parsing, fix bugs (#28)
|
2019-05-09 13:34:17 -07:00 |
|
UserDBTests.cpp
|
Build refactor (#94)
|
2022-04-08 10:58:18 -07:00 |
|
Version.cpp
|
Add missing copyright headers
|
2020-08-24 14:22:29 -07:00 |
|
Version.h
|
Add missing copyright headers
|
2020-08-24 14:22:29 -07:00 |
|
auoms.cpp
|
Revert file perm changes
|
2024-03-28 07:05:26 -05:00 |
|
auoms.version
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
auomscollect.cpp
|
Add event aggregation, fix ftrace usage (#103)
|
2022-11-10 14:18:56 -08:00 |
|
auomsctl.cpp
|
Add support for Mariner and bug fixes (#81)
|
2021-07-28 12:17:46 -07:00 |
|
fakeaudispd.cpp
|
Feature 3.0 (#27)
|
2019-04-30 12:06:02 -07:00 |
|
file2sock.cpp
|
Feature 3.0 (#27)
|
2019-04-30 12:06:02 -07:00 |
|
testreceiver.cpp
|
Fix ack queue deadlock
|
2020-06-11 17:11:11 -07:00 |
dbf2a08fcb