Eunomia
0.1.0
A lightweight eBPF-based CloudNative Monitor tool for Container Security and Observability
|
process rule: More...
#include <sec_analyzer.h>
Public Member Functions | |
virtual | ~process_rule_checker ()=default |
process_rule_checker (std::shared_ptr< sec_analyzer > analyzer_ptr) | |
int | check_rule (const tracker_event< process_event > &e, rule_message &msg) |
Public Member Functions inherited from rule_base< process_event > | |
rule_base (std::shared_ptr< sec_analyzer > analyzer_ptr) | |
virtual | ~rule_base ()=default |
void | handle (tracker_event< process_event > &e) |
implement this function to handle the event More... | |
Public Member Functions inherited from event_handler< process_event > | |
virtual | ~event_handler ()=default |
std::shared_ptr< event_handler< process_event > > | add_handler (std::shared_ptr< event_handler< process_event >> handler) |
add a next handler after this handler More... | |
void | do_handle_event (tracker_event< process_event > &e) |
Public Member Functions inherited from event_handler_base< process_event > | |
virtual | ~event_handler_base ()=default |
Additional Inherited Members | |
Public Attributes inherited from rule_base< process_event > | |
std::shared_ptr< sec_analyzer > | analyzer |
Public Attributes inherited from event_handler< process_event > | |
std::shared_ptr< event_handler_base< process_event > > | next_handler |
process rule:
for example, a specific process is running
|
virtualdefault |
|
inline |
|
virtual |
Implements rule_base< process_event >.