Versions in this module Expand all Collapse all v0 v0.9.0 Oct 20, 2021retracted Changes in this version + var SelfTestFunctions = []func(*SelfTester) error — linux/amd64 + func NewModule(cfg *config.Config) (module.Module, error) — darwin/amd64, js/wasm, windows/amd64 + func NewModule(cfg *sconfig.Config) (module.Module, error) — linux/amd64 + type APIServer struct — linux/amd64 + func NewAPIServer(cfg *config.Config, probe *sprobe.Probe, client *statsd.Client) *APIServer + func (a *APIServer) Apply(ruleIDs []rules.RuleID) + func (a *APIServer) DumpProcessCache(ctx context.Context, params *api.DumpProcessCacheParams) (*api.SecurityDumpProcessCacheMessage, error) + func (a *APIServer) GetConfig(ctx context.Context, params *api.GetConfigParams) (*api.SecurityConfigMessage, error) + func (a *APIServer) GetEvents(params *api.GetEventParams, stream api.SecurityModule_GetEventsServer) error + func (a *APIServer) GetStats() map[string]int64 + func (a *APIServer) RunSelfTest(ctx context.Context, params *api.RunSelfTestParams) (*api.SecuritySelfTestResultMessage, error) + func (a *APIServer) SendEvent(rule *rules.Rule, event Event, extTagsCb func() []string, service string) + func (a *APIServer) SendStats() error + func (a *APIServer) Start(ctx context.Context) + type AgentContext struct + PolicyName string + PolicyVersion string + RuleID string + RuleVersion string + Version string + func (v *AgentContext) UnmarshalEasyJSON(l *jlexer.Lexer) + func (v *AgentContext) UnmarshalJSON(data []byte) error + func (v AgentContext) MarshalEasyJSON(w *jwriter.Writer) + func (v AgentContext) MarshalJSON() ([]byte, error) + type Event interface — linux/amd64 + GetTags func() []string + GetType func() string + type Limit struct — linux/amd64 + Burst int + Limit int + type Limiter struct — linux/amd64 + func NewLimiter(limit rate.Limit, burst int) *Limiter + type LimiterOpts struct — linux/amd64 + Limits map[rules.RuleID]Limit + type Module struct — linux/amd64 + func (m *Module) Close() + func (m *Module) EventDiscarderFound(rs *rules.RuleSet, event eval.Event, field eval.Field, ...) + func (m *Module) GetProbe() *sprobe.Probe + func (m *Module) GetRuleSet() (rs *rules.RuleSet) + func (m *Module) GetStats() map[string]interface{} + func (m *Module) HandleCustomEvent(rule *rules.Rule, event *sprobe.CustomEvent) + func (m *Module) HandleEvent(event *sprobe.Event) + func (m *Module) Init() error + func (m *Module) Register(_ *module.Router) error + func (m *Module) Reload() error + func (m *Module) RuleMatch(rule *rules.Rule, event eval.Event) + func (m *Module) SendEvent(rule *rules.Rule, event Event, extTagsCb func() []string, service string) + func (m *Module) SetRulesetLoadedCallback(cb func(rs *rules.RuleSet)) + func (m *Module) Start() error + type RateLimiter struct — linux/amd64 + func NewRateLimiter(client *statsd.Client, opts LimiterOpts) *RateLimiter + func (rl *RateLimiter) Allow(ruleID string) bool + func (rl *RateLimiter) Apply(rules []rules.RuleID) + func (rl *RateLimiter) GetStats() map[rules.RuleID]RateLimiterStat + func (rl *RateLimiter) SendStats() error + type RateLimiterStat struct — linux/amd64 + type RuleEvent struct — linux/amd64 + Event Event + RuleID string + type SelfTester struct — linux/amd64 + func NewSelfTester() *SelfTester + func (t *SelfTester) AddSelfTestRulesToRuleSets(ruleSet, approverRuleSet *rules.RuleSet) + func (t *SelfTester) BeginWaitingForEvent() error + func (t *SelfTester) Cleanup() error + func (t *SelfTester) CreateTargetFileIfNeeded() error + func (t *SelfTester) EndWaitingForEvent() + func (t *SelfTester) GetSelfTestPolicy() *rules.Policy + func (t *SelfTester) RunSelfTest() error + func (t *SelfTester) SendEventIfExpecting(rule *rules.Rule, event eval.Event) + type Signal struct + Title string + func (v *Signal) UnmarshalEasyJSON(l *jlexer.Lexer) + func (v *Signal) UnmarshalJSON(data []byte) error + func (v Signal) MarshalEasyJSON(w *jwriter.Writer) + func (v Signal) MarshalJSON() ([]byte, error)