event-generator icon indicating copy to clipboard operation
event-generator copied to clipboard

event on `packet socket created in container`

Open h4l0gen opened this issue 1 year ago • 1 comments

Motivation Packet socket could be used for ARP Spoofing and privilege escalation (CVE-2020-14386) by an attacker.

Feature adding an event for triggering stable rule packet socket created in container

Alternatives

Additional context

h4l0gen avatar Mar 18 '24 10:03 h4l0gen

/assign

h4l0gen avatar Mar 18 '24 10:03 h4l0gen