Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

eventchecker

package

Go to main page

Versions in this module

v0

v0.8.20

Mar 14, 2023

v0.8.19

Feb 28, 2023

v0.8.18

Feb 25, 2023

v0.8.17

Feb 21, 2023

v0.8.16

Feb 21, 2023

Changes in this version

+ func CheckerLogPrefix(checker interface{ ... }) string

+ func NextResponseCheck(c MultiEventChecker, res *tetragon.GetEventsResponse, l *logrus.Logger) (bool, error)

+ type CapabilitiesChecker struct

+ Effective *CapabilitiesTypeListMatcher

+ Inheritable *CapabilitiesTypeListMatcher

+ Permitted *CapabilitiesTypeListMatcher

+ func NewCapabilitiesChecker() *CapabilitiesChecker

+ func (checker *CapabilitiesChecker) Check(event *tetragon.Capabilities) error

+ func (checker *CapabilitiesChecker) FromCapabilities(event *tetragon.Capabilities) *CapabilitiesChecker

+ func (checker *CapabilitiesChecker) GetCheckerType() string

+ func (checker *CapabilitiesChecker) WithEffective(check *CapabilitiesTypeListMatcher) *CapabilitiesChecker

+ func (checker *CapabilitiesChecker) WithInheritable(check *CapabilitiesTypeListMatcher) *CapabilitiesChecker

+ func (checker *CapabilitiesChecker) WithPermitted(check *CapabilitiesTypeListMatcher) *CapabilitiesChecker

+ type CapabilitiesTypeChecker tetragon.CapabilitiesType

+ func NewCapabilitiesTypeChecker(val tetragon.CapabilitiesType) *CapabilitiesTypeChecker

+ func (enum *CapabilitiesTypeChecker) Check(val *tetragon.CapabilitiesType) error

+ func (enum *CapabilitiesTypeChecker) UnmarshalJSON(b []byte) error

+ func (enum CapabilitiesTypeChecker) MarshalJSON() ([]byte, error)

+ type CapabilitiesTypeListMatcher struct

+ Operator listmatcher.Operator

+ Values []*CapabilitiesTypeChecker

+ func NewCapabilitiesTypeListMatcher() *CapabilitiesTypeListMatcher

+ func (checker *CapabilitiesTypeListMatcher) Check(values []tetragon.CapabilitiesType) error

+ func (checker *CapabilitiesTypeListMatcher) WithOperator(operator listmatcher.Operator) *CapabilitiesTypeListMatcher

+ func (checker *CapabilitiesTypeListMatcher) WithValues(values ...*CapabilitiesTypeChecker) *CapabilitiesTypeListMatcher

+ type ContainerChecker struct

+ Id *stringmatcher.StringMatcher

+ Image *ImageChecker

+ MaybeExecProbe *bool

+ Name *stringmatcher.StringMatcher

+ Pid *uint32

+ StartTime *timestampmatcher.TimestampMatcher

+ func NewContainerChecker() *ContainerChecker

+ func (checker *ContainerChecker) Check(event *tetragon.Container) error

+ func (checker *ContainerChecker) FromContainer(event *tetragon.Container) *ContainerChecker

+ func (checker *ContainerChecker) GetCheckerType() string

+ func (checker *ContainerChecker) WithId(check *stringmatcher.StringMatcher) *ContainerChecker

+ func (checker *ContainerChecker) WithImage(check *ImageChecker) *ContainerChecker

+ func (checker *ContainerChecker) WithMaybeExecProbe(check bool) *ContainerChecker

+ func (checker *ContainerChecker) WithName(check *stringmatcher.StringMatcher) *ContainerChecker

+ func (checker *ContainerChecker) WithPid(check uint32) *ContainerChecker

+ func (checker *ContainerChecker) WithStartTime(check *timestampmatcher.TimestampMatcher) *ContainerChecker

+ type Event tetragon.Event

+ func EventFromResponse(response *tetragon.GetEventsResponse) (Event, error)

+ type EventChecker interface

+ CheckEvent func(Event) error

+ CheckResponse func(*tetragon.GetEventsResponse) error

+ func CheckerFromEvent(event Event) (EventChecker, error)

+ func CheckerFromResponse(response *tetragon.GetEventsResponse) (EventChecker, error)

+ type FnEventChecker struct

+ FinalCheckFn func(*logrus.Logger) error

+ NextCheckFn func(Event, *logrus.Logger) (bool, error)

+ func (checker *FnEventChecker) FinalCheck(logger *logrus.Logger) error

+ func (checker *FnEventChecker) NextEventCheck(event Event, logger *logrus.Logger) (bool, error)

+ type ImageChecker struct

+ Id *stringmatcher.StringMatcher

+ Name *stringmatcher.StringMatcher

+ func NewImageChecker() *ImageChecker

+ func (checker *ImageChecker) Check(event *tetragon.Image) error

+ func (checker *ImageChecker) FromImage(event *tetragon.Image) *ImageChecker

+ func (checker *ImageChecker) GetCheckerType() string

+ func (checker *ImageChecker) WithId(check *stringmatcher.StringMatcher) *ImageChecker

+ func (checker *ImageChecker) WithName(check *stringmatcher.StringMatcher) *ImageChecker

+ type KprobeActionChecker tetragon.KprobeAction

+ func NewKprobeActionChecker(val tetragon.KprobeAction) *KprobeActionChecker

+ func (enum *KprobeActionChecker) Check(val *tetragon.KprobeAction) error

+ func (enum *KprobeActionChecker) UnmarshalJSON(b []byte) error

+ func (enum KprobeActionChecker) MarshalJSON() ([]byte, error)

+ type KprobeArgumentChecker struct

+ BpfAttrArg *KprobeBpfAttrChecker

+ BpfMapArg *KprobeBpfMapChecker

+ BytesArg *bytesmatcher.BytesMatcher

+ CapabilityArg *KprobeCapabilityChecker

+ CredArg *KprobeCredChecker

+ FileArg *KprobeFileChecker

+ IntArg *int32

+ LongArg *int64

+ PathArg *KprobePathChecker

+ PerfEventArg *KprobePerfEventChecker

+ SizeArg *uint64

+ SkbArg *KprobeSkbChecker

+ SockArg *KprobeSockChecker

+ StringArg *stringmatcher.StringMatcher

+ TruncatedBytesArg *KprobeTruncatedBytesChecker

+ UintArg *uint32

+ UserNamespaceArg *KprobeUserNamespaceChecker

+ func NewKprobeArgumentChecker() *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) Check(event *tetragon.KprobeArgument) error

+ func (checker *KprobeArgumentChecker) FromKprobeArgument(event *tetragon.KprobeArgument) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) GetCheckerType() string

+ func (checker *KprobeArgumentChecker) WithBpfAttrArg(check *KprobeBpfAttrChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithBpfMapArg(check *KprobeBpfMapChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithBytesArg(check *bytesmatcher.BytesMatcher) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithCapabilityArg(check *KprobeCapabilityChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithCredArg(check *KprobeCredChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithFileArg(check *KprobeFileChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithIntArg(check int32) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithLongArg(check int64) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithPathArg(check *KprobePathChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithPerfEventArg(check *KprobePerfEventChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithSizeArg(check uint64) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithSkbArg(check *KprobeSkbChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithSockArg(check *KprobeSockChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithStringArg(check *stringmatcher.StringMatcher) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithTruncatedBytesArg(check *KprobeTruncatedBytesChecker) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithUintArg(check uint32) *KprobeArgumentChecker

+ func (checker *KprobeArgumentChecker) WithUserNamespaceArg(check *KprobeUserNamespaceChecker) *KprobeArgumentChecker

+ type KprobeArgumentListMatcher struct

+ Operator listmatcher.Operator

+ Values []*KprobeArgumentChecker

+ func NewKprobeArgumentListMatcher() *KprobeArgumentListMatcher

+ func (checker *KprobeArgumentListMatcher) Check(values []*tetragon.KprobeArgument) error

+ func (checker *KprobeArgumentListMatcher) WithOperator(operator listmatcher.Operator) *KprobeArgumentListMatcher

+ func (checker *KprobeArgumentListMatcher) WithValues(values ...*KprobeArgumentChecker) *KprobeArgumentListMatcher

+ type KprobeBpfAttrChecker struct

+ InsnCnt *uint32

+ ProgName *stringmatcher.StringMatcher

+ ProgType *stringmatcher.StringMatcher

+ func NewKprobeBpfAttrChecker() *KprobeBpfAttrChecker

+ func (checker *KprobeBpfAttrChecker) Check(event *tetragon.KprobeBpfAttr) error

+ func (checker *KprobeBpfAttrChecker) FromKprobeBpfAttr(event *tetragon.KprobeBpfAttr) *KprobeBpfAttrChecker

+ func (checker *KprobeBpfAttrChecker) GetCheckerType() string

+ func (checker *KprobeBpfAttrChecker) WithInsnCnt(check uint32) *KprobeBpfAttrChecker

+ func (checker *KprobeBpfAttrChecker) WithProgName(check *stringmatcher.StringMatcher) *KprobeBpfAttrChecker

+ func (checker *KprobeBpfAttrChecker) WithProgType(check *stringmatcher.StringMatcher) *KprobeBpfAttrChecker

+ type KprobeBpfMapChecker struct

+ KeySize *uint32

+ MapName *stringmatcher.StringMatcher

+ MapType *stringmatcher.StringMatcher

+ MaxEntries *uint32

+ ValueSize *uint32

+ func NewKprobeBpfMapChecker() *KprobeBpfMapChecker

+ func (checker *KprobeBpfMapChecker) Check(event *tetragon.KprobeBpfMap) error

+ func (checker *KprobeBpfMapChecker) FromKprobeBpfMap(event *tetragon.KprobeBpfMap) *KprobeBpfMapChecker

+ func (checker *KprobeBpfMapChecker) GetCheckerType() string

+ func (checker *KprobeBpfMapChecker) WithKeySize(check uint32) *KprobeBpfMapChecker

+ func (checker *KprobeBpfMapChecker) WithMapName(check *stringmatcher.StringMatcher) *KprobeBpfMapChecker

+ func (checker *KprobeBpfMapChecker) WithMapType(check *stringmatcher.StringMatcher) *KprobeBpfMapChecker

+ func (checker *KprobeBpfMapChecker) WithMaxEntries(check uint32) *KprobeBpfMapChecker

+ func (checker *KprobeBpfMapChecker) WithValueSize(check uint32) *KprobeBpfMapChecker

+ type KprobeCapabilityChecker struct

+ Name *stringmatcher.StringMatcher

+ Value *int32

+ func NewKprobeCapabilityChecker() *KprobeCapabilityChecker

+ func (checker *KprobeCapabilityChecker) Check(event *tetragon.KprobeCapability) error

+ func (checker *KprobeCapabilityChecker) FromKprobeCapability(event *tetragon.KprobeCapability) *KprobeCapabilityChecker

+ func (checker *KprobeCapabilityChecker) GetCheckerType() string

+ func (checker *KprobeCapabilityChecker) WithName(check *stringmatcher.StringMatcher) *KprobeCapabilityChecker

+ func (checker *KprobeCapabilityChecker) WithValue(check int32) *KprobeCapabilityChecker

+ type KprobeCredChecker struct

+ Effective *CapabilitiesTypeListMatcher

+ Inheritable *CapabilitiesTypeListMatcher

+ Permitted *CapabilitiesTypeListMatcher

+ func NewKprobeCredChecker() *KprobeCredChecker

+ func (checker *KprobeCredChecker) Check(event *tetragon.KprobeCred) error

+ func (checker *KprobeCredChecker) FromKprobeCred(event *tetragon.KprobeCred) *KprobeCredChecker

+ func (checker *KprobeCredChecker) GetCheckerType() string

+ func (checker *KprobeCredChecker) WithEffective(check *CapabilitiesTypeListMatcher) *KprobeCredChecker

+ func (checker *KprobeCredChecker) WithInheritable(check *CapabilitiesTypeListMatcher) *KprobeCredChecker

+ func (checker *KprobeCredChecker) WithPermitted(check *CapabilitiesTypeListMatcher) *KprobeCredChecker

+ type KprobeFileChecker struct

+ Flags *stringmatcher.StringMatcher

+ Mount *stringmatcher.StringMatcher

+ Path *stringmatcher.StringMatcher

+ func NewKprobeFileChecker() *KprobeFileChecker

+ func (checker *KprobeFileChecker) Check(event *tetragon.KprobeFile) error

+ func (checker *KprobeFileChecker) FromKprobeFile(event *tetragon.KprobeFile) *KprobeFileChecker

+ func (checker *KprobeFileChecker) GetCheckerType() string

+ func (checker *KprobeFileChecker) WithFlags(check *stringmatcher.StringMatcher) *KprobeFileChecker

+ func (checker *KprobeFileChecker) WithMount(check *stringmatcher.StringMatcher) *KprobeFileChecker

+ func (checker *KprobeFileChecker) WithPath(check *stringmatcher.StringMatcher) *KprobeFileChecker

+ type KprobePathChecker struct

+ Flags *stringmatcher.StringMatcher

+ Mount *stringmatcher.StringMatcher

+ Path *stringmatcher.StringMatcher

+ func NewKprobePathChecker() *KprobePathChecker

+ func (checker *KprobePathChecker) Check(event *tetragon.KprobePath) error

+ func (checker *KprobePathChecker) FromKprobePath(event *tetragon.KprobePath) *KprobePathChecker

+ func (checker *KprobePathChecker) GetCheckerType() string

+ func (checker *KprobePathChecker) WithFlags(check *stringmatcher.StringMatcher) *KprobePathChecker

+ func (checker *KprobePathChecker) WithMount(check *stringmatcher.StringMatcher) *KprobePathChecker

+ func (checker *KprobePathChecker) WithPath(check *stringmatcher.StringMatcher) *KprobePathChecker

+ type KprobePerfEventChecker struct

+ Config *uint64

+ KprobeFunc *stringmatcher.StringMatcher

+ ProbeOffset *uint64

+ Type *stringmatcher.StringMatcher

+ func NewKprobePerfEventChecker() *KprobePerfEventChecker

+ func (checker *KprobePerfEventChecker) Check(event *tetragon.KprobePerfEvent) error

+ func (checker *KprobePerfEventChecker) FromKprobePerfEvent(event *tetragon.KprobePerfEvent) *KprobePerfEventChecker

+ func (checker *KprobePerfEventChecker) GetCheckerType() string

+ func (checker *KprobePerfEventChecker) WithConfig(check uint64) *KprobePerfEventChecker

+ func (checker *KprobePerfEventChecker) WithKprobeFunc(check *stringmatcher.StringMatcher) *KprobePerfEventChecker

+ func (checker *KprobePerfEventChecker) WithProbeOffset(check uint64) *KprobePerfEventChecker

+ func (checker *KprobePerfEventChecker) WithType(check *stringmatcher.StringMatcher) *KprobePerfEventChecker

+ type KprobeSkbChecker struct

+ Daddr *stringmatcher.StringMatcher

+ Dport *uint32

+ Hash *uint32

+ Len *uint32

+ Mark *uint32

+ Priority *uint32

+ Proto *uint32

+ Saddr *stringmatcher.StringMatcher

+ SecPathLen *uint32

+ SecPathOlen *uint32

+ Sport *uint32

+ func NewKprobeSkbChecker() *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) Check(event *tetragon.KprobeSkb) error

+ func (checker *KprobeSkbChecker) FromKprobeSkb(event *tetragon.KprobeSkb) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) GetCheckerType() string

+ func (checker *KprobeSkbChecker) WithDaddr(check *stringmatcher.StringMatcher) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithDport(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithHash(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithLen(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithMark(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithPriority(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithProto(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithSaddr(check *stringmatcher.StringMatcher) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithSecPathLen(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithSecPathOlen(check uint32) *KprobeSkbChecker

+ func (checker *KprobeSkbChecker) WithSport(check uint32) *KprobeSkbChecker

+ type KprobeSockChecker struct

+ Daddr *stringmatcher.StringMatcher

+ Dport *uint32

+ Family *stringmatcher.StringMatcher

+ Mark *uint32

+ Priority *uint32

+ Protocol *stringmatcher.StringMatcher

+ Saddr *stringmatcher.StringMatcher

+ Sport *uint32

+ Type *stringmatcher.StringMatcher

+ func NewKprobeSockChecker() *KprobeSockChecker

+ func (checker *KprobeSockChecker) Check(event *tetragon.KprobeSock) error

+ func (checker *KprobeSockChecker) FromKprobeSock(event *tetragon.KprobeSock) *KprobeSockChecker

+ func (checker *KprobeSockChecker) GetCheckerType() string

+ func (checker *KprobeSockChecker) WithDaddr(check *stringmatcher.StringMatcher) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithDport(check uint32) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithFamily(check *stringmatcher.StringMatcher) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithMark(check uint32) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithPriority(check uint32) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithProtocol(check *stringmatcher.StringMatcher) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithSaddr(check *stringmatcher.StringMatcher) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithSport(check uint32) *KprobeSockChecker

+ func (checker *KprobeSockChecker) WithType(check *stringmatcher.StringMatcher) *KprobeSockChecker

+ type KprobeTruncatedBytesChecker struct

+ BytesArg *bytesmatcher.BytesMatcher

+ OrigSize *uint64

+ func NewKprobeTruncatedBytesChecker() *KprobeTruncatedBytesChecker

+ func (checker *KprobeTruncatedBytesChecker) Check(event *tetragon.KprobeTruncatedBytes) error

+ func (checker *KprobeTruncatedBytesChecker) FromKprobeTruncatedBytes(event *tetragon.KprobeTruncatedBytes) *KprobeTruncatedBytesChecker

+ func (checker *KprobeTruncatedBytesChecker) GetCheckerType() string

+ func (checker *KprobeTruncatedBytesChecker) WithBytesArg(check *bytesmatcher.BytesMatcher) *KprobeTruncatedBytesChecker

+ func (checker *KprobeTruncatedBytesChecker) WithOrigSize(check uint64) *KprobeTruncatedBytesChecker

+ type KprobeUserNamespaceChecker struct

+ Group *uint32

+ Level *int32

+ Ns *NamespaceChecker

+ Owner *uint32

+ func NewKprobeUserNamespaceChecker() *KprobeUserNamespaceChecker

+ func (checker *KprobeUserNamespaceChecker) Check(event *tetragon.KprobeUserNamespace) error

+ func (checker *KprobeUserNamespaceChecker) FromKprobeUserNamespace(event *tetragon.KprobeUserNamespace) *KprobeUserNamespaceChecker

+ func (checker *KprobeUserNamespaceChecker) GetCheckerType() string

+ func (checker *KprobeUserNamespaceChecker) WithGroup(check uint32) *KprobeUserNamespaceChecker

+ func (checker *KprobeUserNamespaceChecker) WithLevel(check int32) *KprobeUserNamespaceChecker

+ func (checker *KprobeUserNamespaceChecker) WithNs(check *NamespaceChecker) *KprobeUserNamespaceChecker

+ func (checker *KprobeUserNamespaceChecker) WithOwner(check uint32) *KprobeUserNamespaceChecker

+ type MultiEventChecker interface

+ FinalCheck func(*logrus.Logger) error

+ NextEventCheck func(Event, *logrus.Logger) (bool, error)

+ type NamespaceChecker struct

+ Inum *uint32

+ IsHost *bool

+ func NewNamespaceChecker() *NamespaceChecker

+ func (checker *NamespaceChecker) Check(event *tetragon.Namespace) error

+ func (checker *NamespaceChecker) FromNamespace(event *tetragon.Namespace) *NamespaceChecker

+ func (checker *NamespaceChecker) GetCheckerType() string

+ func (checker *NamespaceChecker) WithInum(check uint32) *NamespaceChecker

+ func (checker *NamespaceChecker) WithIsHost(check bool) *NamespaceChecker

+ type NamespacesChecker struct

+ Cgroup *NamespaceChecker

+ Ipc *NamespaceChecker

+ Mnt *NamespaceChecker

+ Net *NamespaceChecker

+ Pid *NamespaceChecker

+ PidForChildren *NamespaceChecker

+ Time *NamespaceChecker

+ TimeForChildren *NamespaceChecker

+ User *NamespaceChecker

+ Uts *NamespaceChecker

+ func NewNamespacesChecker() *NamespacesChecker

+ func (checker *NamespacesChecker) Check(event *tetragon.Namespaces) error

+ func (checker *NamespacesChecker) FromNamespaces(event *tetragon.Namespaces) *NamespacesChecker

+ func (checker *NamespacesChecker) GetCheckerType() string

+ func (checker *NamespacesChecker) WithCgroup(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithIpc(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithMnt(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithNet(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithPid(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithPidForChildren(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithTime(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithTimeForChildren(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithUser(check *NamespaceChecker) *NamespacesChecker

+ func (checker *NamespacesChecker) WithUts(check *NamespaceChecker) *NamespacesChecker

+ type OrderedEventChecker struct

+ func NewOrderedEventChecker(checks ...EventChecker) *OrderedEventChecker

+ func (checker *OrderedEventChecker) AddChecks(checks ...EventChecker)

+ func (checker *OrderedEventChecker) FinalCheck(logger *logrus.Logger) error

+ func (checker *OrderedEventChecker) GetChecks() []EventChecker

+ func (checker *OrderedEventChecker) GetRemainingChecks() []EventChecker

+ func (checker *OrderedEventChecker) NextEventCheck(event Event, logger *logrus.Logger) (bool, error)

+ type PodChecker struct

+ Container *ContainerChecker

+ Labels map[string]stringmatcher.StringMatcher

+ Name *stringmatcher.StringMatcher

+ Namespace *stringmatcher.StringMatcher

+ PodLabels map[string]stringmatcher.StringMatcher

+ func NewPodChecker() *PodChecker

+ func (checker *PodChecker) Check(event *tetragon.Pod) error

+ func (checker *PodChecker) FromPod(event *tetragon.Pod) *PodChecker

+ func (checker *PodChecker) GetCheckerType() string

+ func (checker *PodChecker) WithContainer(check *ContainerChecker) *PodChecker

+ func (checker *PodChecker) WithLabels(check map[string]stringmatcher.StringMatcher) *PodChecker

+ func (checker *PodChecker) WithName(check *stringmatcher.StringMatcher) *PodChecker

+ func (checker *PodChecker) WithNamespace(check *stringmatcher.StringMatcher) *PodChecker

+ func (checker *PodChecker) WithPodLabels(check map[string]stringmatcher.StringMatcher) *PodChecker

+ type ProcessChecker struct

+ Arguments *stringmatcher.StringMatcher

+ Auid *uint32

+ Binary *stringmatcher.StringMatcher

+ Cap *CapabilitiesChecker

+ Cwd *stringmatcher.StringMatcher

+ Docker *stringmatcher.StringMatcher

+ ExecId *stringmatcher.StringMatcher

+ Flags *stringmatcher.StringMatcher

+ Ns *NamespacesChecker

+ ParentExecId *stringmatcher.StringMatcher

+ Pid *uint32

+ Pod *PodChecker

+ Refcnt *uint32

+ StartTime *timestampmatcher.TimestampMatcher

+ Uid *uint32

+ func NewProcessChecker() *ProcessChecker

+ func (checker *ProcessChecker) Check(event *tetragon.Process) error

+ func (checker *ProcessChecker) FromProcess(event *tetragon.Process) *ProcessChecker

+ func (checker *ProcessChecker) GetCheckerType() string

+ func (checker *ProcessChecker) WithArguments(check *stringmatcher.StringMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithAuid(check uint32) *ProcessChecker

+ func (checker *ProcessChecker) WithBinary(check *stringmatcher.StringMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithCap(check *CapabilitiesChecker) *ProcessChecker

+ func (checker *ProcessChecker) WithCwd(check *stringmatcher.StringMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithDocker(check *stringmatcher.StringMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithExecId(check *stringmatcher.StringMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithFlags(check *stringmatcher.StringMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithNs(check *NamespacesChecker) *ProcessChecker

+ func (checker *ProcessChecker) WithParentExecId(check *stringmatcher.StringMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithPid(check uint32) *ProcessChecker

+ func (checker *ProcessChecker) WithPod(check *PodChecker) *ProcessChecker

+ func (checker *ProcessChecker) WithRefcnt(check uint32) *ProcessChecker

+ func (checker *ProcessChecker) WithStartTime(check *timestampmatcher.TimestampMatcher) *ProcessChecker

+ func (checker *ProcessChecker) WithUid(check uint32) *ProcessChecker

+ type ProcessExecChecker struct

+ Ancestors *ProcessListMatcher

+ CheckerName string

+ Parent *ProcessChecker

+ Process *ProcessChecker

+ func NewProcessExecChecker(name string) *ProcessExecChecker

+ func (checker *ProcessExecChecker) Check(event *tetragon.ProcessExec) error

+ func (checker *ProcessExecChecker) CheckEvent(event Event) error

+ func (checker *ProcessExecChecker) CheckResponse(response *tetragon.GetEventsResponse) error

+ func (checker *ProcessExecChecker) FromProcessExec(event *tetragon.ProcessExec) *ProcessExecChecker

+ func (checker *ProcessExecChecker) GetCheckerName() string

+ func (checker *ProcessExecChecker) GetCheckerType() string

+ func (checker *ProcessExecChecker) WithAncestors(check *ProcessListMatcher) *ProcessExecChecker

+ func (checker *ProcessExecChecker) WithParent(check *ProcessChecker) *ProcessExecChecker

+ func (checker *ProcessExecChecker) WithProcess(check *ProcessChecker) *ProcessExecChecker

+ type ProcessExitChecker struct

+ CheckerName string

+ Parent *ProcessChecker

+ Process *ProcessChecker

+ Signal *stringmatcher.StringMatcher

+ Status *uint32

+ Time *timestampmatcher.TimestampMatcher

+ func NewProcessExitChecker(name string) *ProcessExitChecker

+ func (checker *ProcessExitChecker) Check(event *tetragon.ProcessExit) error

+ func (checker *ProcessExitChecker) CheckEvent(event Event) error

+ func (checker *ProcessExitChecker) CheckResponse(response *tetragon.GetEventsResponse) error

+ func (checker *ProcessExitChecker) FromProcessExit(event *tetragon.ProcessExit) *ProcessExitChecker

+ func (checker *ProcessExitChecker) GetCheckerName() string

+ func (checker *ProcessExitChecker) GetCheckerType() string

+ func (checker *ProcessExitChecker) WithParent(check *ProcessChecker) *ProcessExitChecker

+ func (checker *ProcessExitChecker) WithProcess(check *ProcessChecker) *ProcessExitChecker

+ func (checker *ProcessExitChecker) WithSignal(check *stringmatcher.StringMatcher) *ProcessExitChecker

+ func (checker *ProcessExitChecker) WithStatus(check uint32) *ProcessExitChecker

+ func (checker *ProcessExitChecker) WithTime(check *timestampmatcher.TimestampMatcher) *ProcessExitChecker

+ type ProcessKprobeChecker struct

+ Action *KprobeActionChecker

+ Args *KprobeArgumentListMatcher

+ CheckerName string

+ FunctionName *stringmatcher.StringMatcher

+ Parent *ProcessChecker

+ Process *ProcessChecker

+ Return *KprobeArgumentChecker

+ func NewProcessKprobeChecker(name string) *ProcessKprobeChecker

+ func (checker *ProcessKprobeChecker) Check(event *tetragon.ProcessKprobe) error

+ func (checker *ProcessKprobeChecker) CheckEvent(event Event) error

+ func (checker *ProcessKprobeChecker) CheckResponse(response *tetragon.GetEventsResponse) error

+ func (checker *ProcessKprobeChecker) FromProcessKprobe(event *tetragon.ProcessKprobe) *ProcessKprobeChecker

+ func (checker *ProcessKprobeChecker) GetCheckerName() string

+ func (checker *ProcessKprobeChecker) GetCheckerType() string

+ func (checker *ProcessKprobeChecker) WithAction(check tetragon.KprobeAction) *ProcessKprobeChecker

+ func (checker *ProcessKprobeChecker) WithArgs(check *KprobeArgumentListMatcher) *ProcessKprobeChecker

+ func (checker *ProcessKprobeChecker) WithFunctionName(check *stringmatcher.StringMatcher) *ProcessKprobeChecker

+ func (checker *ProcessKprobeChecker) WithParent(check *ProcessChecker) *ProcessKprobeChecker

+ func (checker *ProcessKprobeChecker) WithProcess(check *ProcessChecker) *ProcessKprobeChecker

+ func (checker *ProcessKprobeChecker) WithReturn(check *KprobeArgumentChecker) *ProcessKprobeChecker

+ type ProcessListMatcher struct

+ Operator listmatcher.Operator

+ Values []*ProcessChecker

+ func NewProcessListMatcher() *ProcessListMatcher

+ func (checker *ProcessListMatcher) Check(values []*tetragon.Process) error

+ func (checker *ProcessListMatcher) WithOperator(operator listmatcher.Operator) *ProcessListMatcher

+ func (checker *ProcessListMatcher) WithValues(values ...*ProcessChecker) *ProcessListMatcher

+ type ProcessLoaderChecker struct

+ Buildid *bytesmatcher.BytesMatcher

+ CheckerName string

+ Path *stringmatcher.StringMatcher

+ Process *ProcessChecker

+ func NewProcessLoaderChecker(name string) *ProcessLoaderChecker

+ func (checker *ProcessLoaderChecker) Check(event *tetragon.ProcessLoader) error

+ func (checker *ProcessLoaderChecker) CheckEvent(event Event) error

+ func (checker *ProcessLoaderChecker) CheckResponse(response *tetragon.GetEventsResponse) error

+ func (checker *ProcessLoaderChecker) FromProcessLoader(event *tetragon.ProcessLoader) *ProcessLoaderChecker

+ func (checker *ProcessLoaderChecker) GetCheckerName() string

+ func (checker *ProcessLoaderChecker) GetCheckerType() string

+ func (checker *ProcessLoaderChecker) WithBuildid(check *bytesmatcher.BytesMatcher) *ProcessLoaderChecker

+ func (checker *ProcessLoaderChecker) WithPath(check *stringmatcher.StringMatcher) *ProcessLoaderChecker

+ func (checker *ProcessLoaderChecker) WithProcess(check *ProcessChecker) *ProcessLoaderChecker

+ type ProcessTracepointChecker struct

+ Args *KprobeArgumentListMatcher

+ CheckerName string

+ Event *stringmatcher.StringMatcher

+ Parent *ProcessChecker

+ Process *ProcessChecker

+ Subsys *stringmatcher.StringMatcher

+ func NewProcessTracepointChecker(name string) *ProcessTracepointChecker

+ func (checker *ProcessTracepointChecker) Check(event *tetragon.ProcessTracepoint) error

+ func (checker *ProcessTracepointChecker) CheckEvent(event Event) error

+ func (checker *ProcessTracepointChecker) CheckResponse(response *tetragon.GetEventsResponse) error

+ func (checker *ProcessTracepointChecker) FromProcessTracepoint(event *tetragon.ProcessTracepoint) *ProcessTracepointChecker

+ func (checker *ProcessTracepointChecker) GetCheckerName() string

+ func (checker *ProcessTracepointChecker) GetCheckerType() string

+ func (checker *ProcessTracepointChecker) WithArgs(check *KprobeArgumentListMatcher) *ProcessTracepointChecker

+ func (checker *ProcessTracepointChecker) WithEvent(check *stringmatcher.StringMatcher) *ProcessTracepointChecker

+ func (checker *ProcessTracepointChecker) WithParent(check *ProcessChecker) *ProcessTracepointChecker

+ func (checker *ProcessTracepointChecker) WithProcess(check *ProcessChecker) *ProcessTracepointChecker

+ func (checker *ProcessTracepointChecker) WithSubsys(check *stringmatcher.StringMatcher) *ProcessTracepointChecker

+ type TestChecker struct

+ Arg0 *uint64

+ Arg1 *uint64

+ Arg2 *uint64

+ Arg3 *uint64

+ CheckerName string

+ func NewTestChecker(name string) *TestChecker

+ func (checker *TestChecker) Check(event *tetragon.Test) error

+ func (checker *TestChecker) CheckEvent(event Event) error

+ func (checker *TestChecker) CheckResponse(response *tetragon.GetEventsResponse) error

+ func (checker *TestChecker) FromTest(event *tetragon.Test) *TestChecker

+ func (checker *TestChecker) GetCheckerName() string

+ func (checker *TestChecker) GetCheckerType() string

+ func (checker *TestChecker) WithArg0(check uint64) *TestChecker

+ func (checker *TestChecker) WithArg1(check uint64) *TestChecker

+ func (checker *TestChecker) WithArg2(check uint64) *TestChecker

+ func (checker *TestChecker) WithArg3(check uint64) *TestChecker

+ type UnorderedEventChecker struct

+ func NewUnorderedEventChecker(checks ...EventChecker) *UnorderedEventChecker

+ func (checker *UnorderedEventChecker) AddChecks(checks ...EventChecker)

+ func (checker *UnorderedEventChecker) FinalCheck(logger *logrus.Logger) error

+ func (checker *UnorderedEventChecker) GetChecks() []EventChecker

+ func (checker *UnorderedEventChecker) GetRemainingChecks() []EventChecker

+ func (checker *UnorderedEventChecker) NextEventCheck(event Event, logger *logrus.Logger) (bool, error)