tracee icon indicating copy to clipboard operation
tracee copied to clipboard

[FEAT] Tracee-Rules filter mediation

Open NDStrahilevitz opened this issue 3 years ago • 0 comments

Prerequisites

  • [ ] This issue is an EPIC issue (add label: EPIC).
  • [ ] This issue is an EPIC TASK (add issue to EPIC description).

Select one OR another:

  • [x] I'll create a PR to implement this feature (assign to yourself).

Feature description

In order to configure tracee-ebpf filters during runtime according to signature needs, the metadata described in #1728 should be used to send requests to the API in #1726. This request mediation should happen in the tracee-rules cmd, in order to decouple from the engine itself.

Additional Information (feature drawings, files, logs, etc)

image

NDStrahilevitz avatar May 03 '22 14:05 NDStrahilevitz