tracee
tracee copied to clipboard
[FEAT] Tracee-Rules filter mediation
Prerequisites
- [ ] This issue is an EPIC issue (add label: EPIC).
- [ ] This issue is an EPIC TASK (add issue to EPIC description).
Select one OR another:
- [x] I'll create a PR to implement this feature (assign to yourself).
Feature description
In order to configure tracee-ebpf filters during runtime according to signature needs, the metadata described in #1728 should be used to send requests to the API in #1726.
This request mediation should happen in the tracee-rules cmd, in order to decouple from the engine itself.
Additional Information (feature drawings, files, logs, etc)