feat(go): advance validation sidecar toward production
This commit is contained in:
parent
6a06eba255
commit
f85c2e831a
92 changed files with 8881 additions and 91 deletions
9
tests/fixtures/go/exec-rules.toml
vendored
Normal file
9
tests/fixtures/go/exec-rules.toml
vendored
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
[[exec_rules]]
|
||||
sid = 190001
|
||||
msg = "Custom replay rule"
|
||||
severity = "medium"
|
||||
classtype = "custom-exec"
|
||||
path_prefixes = ["/opt/custom/"]
|
||||
parent_comm = ["cron"]
|
||||
argv_regex = 'danger\s+now'
|
||||
parent_exclude = ["sshd"]
|
||||
Loading…
Add table
Add a link
Reference in a new issue