luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(go): port socket detectors

Browse source
This commit is contained in:
Luna 2026-07-10 17:29:07 -07:00
parent fc9b5f0448
commit c6f7219de8
23 changed files with 693 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

7
CLAUDE.md
View file

@ -32,9 +32,10 @@ bcc/eBPF telemetry.
An experimental, non-installing Phase 1 Go sidecar now lives under `go-agent/`.
It is stdlib-only, emits `enodia.event.v1` JSONL, captures an injectable process
and file-descriptor view, and currently ports `ld_preload`, `deleted_exe`,
`input_snooper`, and `credential_access`. Python remains the production agent
and parity oracle; do not describe the Go path as a replacement yet.
file-descriptor, and socket view, and currently ports `reverse_shell`,
`ld_preload`, `deleted_exe`, `input_snooper`, `credential_access`,
`stealth_network`, and `egress`. Python remains the production agent and parity
oracle; do not describe the Go path as a replacement yet.
Implemented detection coverage: