Add enrichment and SID coverage gates

2026-07-08 17:05:17 -07:00 · 2026-07-08 17:05:17 -07:00 · 66472134d8
commit 66472134d8
parent 93ac47dd82
32 changed files with 1623 additions and 31 deletions
--- a/tests/fixtures/sids/100060-mprotect-rwx.json
+++ b/tests/fixtures/sids/100060-mprotect-rwx.json
@ -0,0 +1,9 @@
+{
+  "event": "syscall",
+  "pid": 4250,
+  "ppid": 4100,
+  "uid": 1000,
+  "comm": "loader",
+  "syscall": "mprotect",
+  "args": [140000000, 4096, 7]
+}