luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(go): port process access detectors

Browse source
This commit is contained in:
Luna 2026-07-10 05:19:56 -07:00
parent f02509aab5
commit fc9b5f0448
22 changed files with 554 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

3
CLAUDE.md
View file

@ -32,7 +32,8 @@ bcc/eBPF telemetry.
An experimental, non-installing Phase 1 Go sidecar now lives under `go-agent/`.
It is stdlib-only, emits `enodia.event.v1` JSONL, captures an injectable process
view, and ports only `deleted_exe` so far. Python remains the production agent
and file-descriptor view, and currently ports `ld_preload`, `deleted_exe`,
`input_snooper`, and `credential_access`. Python remains the production agent
and parity oracle; do not describe the Go path as a replacement yet.
Implemented detection coverage: