config

Documentation

Index

• type Config
  • func GetConfig(content string, debug bool) (*Config, error)
  • func ReadFile(cfgpath string, debug bool) (*Config, error)
  • func (c *Config) UnmarshalYAML(unmarshal func(v interface{}) error) error
• type FirstMatcher
  • func (f FirstMatcher) MatchAndName(nacl common.ProcAttributes) (bool, string)
  • func (f FirstMatcher) String() string
• type Matcher
• type MatcherGroup
• type MatcherRules
  • func (r MatcherRules) ToConfig() (*Config, error)

Types

type Config

type Config struct {
	MatchNamers FirstMatcher
}

func GetConfig

func GetConfig(content string, debug bool) (*Config, error)

GetConfig extracts Config from content by parsing it as YAML.

func ReadFile

func ReadFile(cfgpath string, debug bool) (*Config, error)

ReadRecipesFile opens the named file and extracts recipes from it.

func (*Config) UnmarshalYAML

func (c *Config) UnmarshalYAML(unmarshal func(v interface{}) error) error

type FirstMatcher

type FirstMatcher struct {
	// contains filtered or unexported fields
}

func (FirstMatcher) MatchAndName

func (f FirstMatcher) MatchAndName(nacl common.ProcAttributes) (bool, string)

func (FirstMatcher) String

func (f FirstMatcher) String() string

type Matcher

type Matcher interface {
	// Match returns empty string for no match, or the group name on success.
	Match(common.ProcAttributes) bool
}

type MatcherGroup

type MatcherGroup struct {
	Name         string   `yaml:"name"`
	CommRules    []string `yaml:"comm"`
	ExeRules     []string `yaml:"exe"`
	CmdlineRules []string `yaml:"cmdline"`
}

type MatcherRules

type MatcherRules []MatcherGroup

func (MatcherRules) ToConfig

func (r MatcherRules) ToConfig() (*Config, error)