malwaremanager

Documentation

Index

• type MalwareManagerClient
• type MalwareManagerMock
  • func CreateMalwareManagerMock() *MalwareManagerMock
  • func (r MalwareManagerMock) ContainerCallback(_ containercollection.PubSubEvent)
  • func (r MalwareManagerMock) ReportFileExec(_ string, _ tracerexectype.Event)
  • func (r MalwareManagerMock) ReportFileOpen(_ string, _ traceropentype.Event)
• type MalwareResult
• type MalwareScanner

Types

type MalwareManagerClient

type MalwareManagerClient interface {
	ReportFileExec(k8sContainerID string, event tracerexectype.Event)
	ReportFileOpen(k8sContainerID string, event traceropentype.Event)
	ContainerCallback(notif containercollection.PubSubEvent)
}

type MalwareManagerMock

type MalwareManagerMock struct {
}

func CreateMalwareManagerMock

func CreateMalwareManagerMock() *MalwareManagerMock

func (MalwareManagerMock) ContainerCallback

func (r MalwareManagerMock) ContainerCallback(_ containercollection.PubSubEvent)

func (MalwareManagerMock) ReportFileExec

func (r MalwareManagerMock) ReportFileExec(_ string, _ tracerexectype.Event)

func (MalwareManagerMock) ReportFileOpen

func (r MalwareManagerMock) ReportFileOpen(_ string, _ traceropentype.Event)

type MalwareResult

type MalwareResult interface {
	// Get Basic Runtime Alert
	GetBasicRuntimeAlert() apitypes.BaseRuntimeAlert
	// Get Runtime Process Details
	GetRuntimeProcessDetails() apitypes.ProcessTree
	// Get Trigger Event
	GetTriggerEvent() igtypes.Event
	// Get Malware Description
	GetMalwareRuntimeAlert() apitypes.MalwareAlert
	// Get K8s Runtime Details
	GetRuntimeAlertK8sDetails() apitypes.RuntimeAlertK8sDetails

	// Set Workload Details
	SetWorkloadDetails(workloadDetails string)
	// Set Basic Runtime Alert
	SetBasicRuntimeAlert(basicRuntimeAlert apitypes.BaseRuntimeAlert)
	// Set Runtime Process Details
	SetRuntimeProcessDetails(processTree apitypes.ProcessTree)
	// Set Trigger Event
	SetTriggerEvent(event igtypes.Event)
	// Set Malware Description
	SetMalwareRuntimeAlert(malwareRuntimeAlert apitypes.MalwareAlert)
	// Set K8s Runtime Details
	SetRuntimeAlertK8sDetails(runtimeAlertK8sDetails apitypes.RuntimeAlertK8sDetails)
}

type MalwareScanner

type MalwareScanner interface {
	// Scan scans the event for malware.
	Scan(eventType utils.EventType, event interface{}, containerPid uint32) MalwareResult
}