Eunomia  0.1.0
A lightweight eBPF-based CloudNative Monitor tool for Container Security and Observability
sec_analyzer.h File Reference
#include "files.h"
#include "model/event_handler.h"
#include "process.h"
#include "prometheus_server.h"
#include "syscall.h"
Include dependency graph for sec_analyzer.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes

struct  rule_message
 message for sec_rule More...
 
struct  sec_rule_describe
 describe a sec_rule More...
 
class  sec_analyzer
 sec analyzer manager More...
 
class  sec_analyzer_prometheus
 sec analyzer manager with prometheus exporter More...
 
class  rule_base< EVNET >
 base class for securiy rules detect handler More...
 
class  files_rule_checker
 files rule: More...
 
class  process_rule_checker
 process rule: More...
 
class  syscall_rule_checker
 syscall rule: More...
 

Enumerations

enum  sec_rule_level { sec_rule_level::event, sec_rule_level::warnning, sec_rule_level::alert }
 sec rules info level More...
 
enum  sec_rule_type {
  sec_rule_type::syscall, sec_rule_type::tcp, sec_rule_type::process, sec_rule_type::files,
  sec_rule_type::mix
}
 sec rules type More...
 

Enumeration Type Documentation

◆ sec_rule_level

enum sec_rule_level
strong

sec rules info level

Enumerator
event 
warnning 
alert 

◆ sec_rule_type

enum sec_rule_type
strong

sec rules type

eg. system call, file access, etc.

Enumerator
syscall 
tcp 
process 
files 
mix