Open Issues Need Help
View All on GitHubReal-time Threat Detection using eBPF + Rust
AI Summary: Implement unit tests for the userspace rule engine in the rwatch project, covering YAML rule parsing, validation, and event matching scenarios. Tests should include both valid and invalid rule files and various event matching conditions.
Real-time Threat Detection using eBPF + Rust
AI Summary: Implement a rule engine for the rwatch threat detection tool that processes captured execve events and matches them against rules defined in a YAML or JSON configuration file. The engine should trigger alerts when a rule is matched.
Real-time Threat Detection using eBPF + Rust