Melissa Kilby

> Hey folks, > > It looks like we have a lot of ideas here, but we haven't reached a consensus, so I will try to summarize the discussion, collect...

Also depending on the proposal we may end up using this PR just for some sinsp_filter_check_thread helpers cleanup and create a new one for the new fields? We will see,...

> If we reach a consensus on this part of the proposal, I'd recommend rescoping this PR to only add the required field(s) (e.g., proc.lineage). SGTM, only suggestion would be...

/remove-lifecycle stale

/milestone 0.15.0 /assign but it won't be just one PR or one person working on it, a collaborative effort is needed

Yes. So far we cleaned the API up, but we still need to improve the robustness and self-healing mechanisms if possible. I'll post more starting in 2 weeks ...

Very nice, on that note: Did we ever compare our simple string comparison approach with re2 simple string comparison (no regex)? Just to check if our simple string comparisons have...

> @incertum from my experiments, our simple comparisons are generally faster by at least 5x. This is an indicator that the best practice is to use regex comparisons only where...

@falcosecurity/falco-maintainers

> I'm in favor of something like that. Some time ago, I thought I would make a plugin for that, but I never did it. Now, I agree it makes...