Add enrichment and SID coverage gates

This commit is contained in:
Luna 2026-07-08 17:05:17 -07:00
parent 93ac47dd82
commit 66472134d8
32 changed files with 1623 additions and 31 deletions

9
tests/fixtures/sids/100066-mlock.json vendored Normal file
View file

@ -0,0 +1,9 @@
{
"event": "syscall",
"pid": 4256,
"ppid": 4100,
"uid": 1000,
"comm": "secretstore",
"syscall": "mlock",
"args": [140000000, 4096, 0]
}