kunai-project/kunai issues and pull requests

#104 - rm: remove unused dependencies

Pull Request - State: closed - Opened by qjerome 7 days ago

#103 - feat: integrate community-id

Pull Request - State: closed - Opened by qjerome 9 days ago

#102 - enhance: faster EventProducer implementation

Pull Request - State: closed - Opened by qjerome 13 days ago

#101 - feat: new write_and_close event

Pull Request - State: closed - Opened by qjerome 17 days ago

#100 - fix: aarch64 build

Pull Request - State: closed - Opened by qjerome 20 days ago

#99 - chore: prepare new release

Pull Request - State: closed - Opened by qjerome 21 days ago

#98 - fix: namespace cache

Pull Request - State: closed - Opened by qjerome 21 days ago

#97 - fix #70: making IoC severity configurable

Pull Request - State: closed - Opened by qjerome 22 days ago

#96 - Use eBPF RingBuffer instead of PerfEvent

Issue - State: open - Opened by qjerome 24 days ago
Labels: enhancement

#95 - fix: high memory consumption issue

Pull Request - State: closed - Opened by qjerome 27 days ago - 35 comments

#94 - document new way to build for aarch64

Issue - State: open - Opened by qjerome 27 days ago

#93 - consider making errors not skipped by serde

Issue - State: open - Opened by qjerome 27 days ago

#92 - Kunai consumes a lot of ram when under intense pressure, and never releases said RAM.

Issue - State: closed - Opened by miyoyo about 1 month ago - 6 comments

#91 - feat: implement handling action in detection rules + yara-x integration

Pull Request - State: closed - Opened by qjerome about 2 months ago

#90 - Optimization: skip kunai events in eBPF

Issue - State: open - Opened by qjerome 2 months ago
Labels: next-release

#89 - feat: new kill event + hardened mode through LSM

Pull Request - State: closed - Opened by qjerome 2 months ago

#88 - test

Pull Request - State: closed - Opened by qjerome 2 months ago

#87 - fix: broken clippy command for eBPF

Pull Request - State: closed - Opened by qjerome 2 months ago

#86 - fix: tokio task panic propagation

Pull Request - State: closed - Opened by qjerome 2 months ago

#85 - feat: new CLI

Pull Request - State: closed - Opened by qjerome 2 months ago

#84 - rework args cli

Issue - State: closed - Opened by qjerome 2 months ago
Labels: next-release

#83 - Fix ci test kernel

Pull Request - State: closed - Opened by qjerome 2 months ago

#82 - implement kill event

Issue - State: closed - Opened by qjerome 2 months ago
Labels: next-release

#81 - fix: imports

Pull Request - State: closed - Opened by qjerome 2 months ago

#80 - cleanup C-Shim

Issue - State: open - Opened by qjerome 2 months ago

#79 - fix: run error never shown

Pull Request - State: closed - Opened by qjerome 2 months ago

#78 - fix: aarch64 compatibility

Pull Request - State: closed - Opened by qjerome 2 months ago

#77 - feat: log rotation

Pull Request - State: closed - Opened by qjerome 3 months ago

#76 - fix #72: bug trying to match container type in rule

Pull Request - State: closed - Opened by qjerome 3 months ago

#75 - fix: simplify build

Pull Request - State: closed - Opened by qjerome 3 months ago

#74 - Implement community ID for network related events

Issue - State: closed - Opened by qjerome 3 months ago
Labels: next-release

#73 - Implement log rotation

Issue - State: closed - Opened by qjerome 3 months ago - 1 comment
Labels: enhancement, high prio

#72 - Bug when trying to match container in rules

Issue - State: closed - Opened by qjerome 3 months ago - 1 comment
Labels: bug

#71 - aarch64 compability

Issue - State: closed - Opened by ReturnRei 3 months ago - 2 comments
Labels: bug

#70 - Consider making IoC severity configurable

Issue - State: closed - Opened by davidszili 3 months ago
Labels: next-release

#69 - Enhancements

Pull Request - State: closed - Opened by qjerome 3 months ago

#68 - Fix and enhancements

Pull Request - State: closed - Opened by qjerome 3 months ago

#67 - chg: make send_data trigger configurable + probe improvement

Pull Request - State: closed - Opened by qjerome 4 months ago

#66 - fix #65: issue with send_data probe

Pull Request - State: closed - Opened by qjerome 4 months ago

#65 - send_data issue on debian 12

Issue - State: closed - Opened by qjerome 4 months ago - 1 comment
Labels: bug

#64 - Clone event has wrong information

Issue - State: closed - Opened by qjerome 4 months ago
Labels: bug

#63 - inode struct changed in kernel 6.7

Issue - State: closed - Opened by qjerome 4 months ago
Labels: bug

#62 - Enhancements

Pull Request - State: closed - Opened by qjerome 4 months ago

#61 - Issue with kretprobes not surviving to suspend/resume cycle

Issue - State: closed - Opened by qjerome 4 months ago

#60 - Hook _sys_connect fn instead of connect

Issue - State: closed - Opened by qjerome 6 months ago - 1 comment
Labels: enhancement

#59 - log replay feature

Pull Request - State: closed - Opened by qjerome 6 months ago

#58 - Version bump

Pull Request - State: closed - Opened by qjerome 6 months ago

#57 - Migration to latest stable Aya

Pull Request - State: closed - Opened by qjerome 6 months ago

#56 - BufferError in ubuntu 20.04

Issue - State: closed - Opened by qjerome 6 months ago - 1 comment
Labels: bug

#55 - Wip/prep release

Pull Request - State: closed - Opened by qjerome 8 months ago

#54 - remove mount event

Issue - State: closed - Opened by qjerome 8 months ago
Labels: next-release

#53 - ancestor field on all events

Issue - State: closed - Opened by qjerome 8 months ago

#52 - Fix error dns probe

Pull Request - State: closed - Opened by qjerome 8 months ago

#51 - Bug fix and enhancement session

Pull Request - State: closed - Opened by qjerome 8 months ago

#50 - evaluate removal of FdMap

Issue - State: closed - Opened by qjerome 8 months ago
Labels: refactor

#49 - fix #16 improved errors happening in BPF and refactored kunai-common

Pull Request - State: closed - Opened by qjerome 8 months ago

#48 - Cgroup parsing errors

Issue - State: closed - Opened by qjerome 8 months ago
Labels: bug

#47 - Implement detection of Kubernetes containers

Issue - State: open - Opened by qjerome 8 months ago
Labels: enhancement

#46 - fix #38 simplify clone probe

Pull Request - State: closed - Opened by qjerome 8 months ago

#45 - Finit module probe

Pull Request - State: closed - Opened by qjerome 8 months ago

#44 - changed some error msg to warnings

Pull Request - State: closed - Opened by qjerome 8 months ago

#43 - detect containers on procfs

Pull Request - State: closed - Opened by qjerome 8 months ago

#42 - fix shlex dependabot alert

Pull Request - State: closed - Opened by qjerome 8 months ago

#41 - reworked the way kprobe ctx is saved and restored

Pull Request - State: closed - Opened by qjerome 8 months ago

#40 - update bpf-linker build tool

Pull Request - State: closed - Opened by qjerome 8 months ago

#39 - Fix/bug clone probe

Pull Request - State: closed - Opened by qjerome 8 months ago

#38 - Simplify clone probe

Issue - State: closed - Opened by qjerome 8 months ago
Labels: enhancement

#37 - Fix/bug fixing session

Pull Request - State: closed - Opened by qjerome 8 months ago

#36 - Error in prctl probe

Issue - State: closed - Opened by qjerome 8 months ago
Labels: bug

#35 - Bug in schedule probe

Issue - State: closed - Opened by qjerome 8 months ago
Labels: bug

#34 - Error in clone probe

Issue - State: closed - Opened by qjerome 8 months ago - 1 comment
Labels: bug

#33 - Fix/file unlink probe

Pull Request - State: closed - Opened by qjerome 8 months ago

#32 - Wip/data model harmonization

Pull Request - State: closed - Opened by qjerome 8 months ago

#31 - Wip/host UUID

Pull Request - State: closed - Opened by qjerome 9 months ago

#30 - Improve container information in events

Issue - State: closed - Opened by qjerome 9 months ago
Labels: enhancement

#29 - updated aya helpers (fix #14)

Pull Request - State: closed - Opened by qjerome 9 months ago

#28 - Bump unsafe-libyaml from 0.2.9 to 0.2.10

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago
Labels: dependencies

#27 - improve hostname correlation

Issue - State: closed - Opened by qjerome 9 months ago
Labels: enhancement

#26 - Bug in send_data event for latest for latest LTS (6.6.10)

Issue - State: closed - Opened by qjerome 9 months ago
Labels: bug, high prio

#25 - BufferError in latest Linux LTS

Issue - State: closed - Opened by qjerome 9 months ago
Labels: bug, high prio

#24 - Add kernel test 6.6

Issue - State: open - Opened by qjerome 9 months ago
Labels: high prio

#23 - Fix path in latest LTS

Issue - State: closed - Opened by qjerome 9 months ago
Labels: bug, high prio

#22 - IoC scanning

Issue - State: closed - Opened by qjerome 9 months ago
Labels: enhancement, next-release

#21 - Machine Id

Issue - State: closed - Opened by qjerome 9 months ago
Labels: enhancement, next-release

#20 - Info when parent is kernel

Issue - State: closed - Opened by qjerome 9 months ago

#19 - Better track zombie processes

Issue - State: open - Opened by qjerome 10 months ago
Labels: enhancement, low prio

#18 - can't find executable

Issue - State: closed - Opened by merkleID 10 months ago - 5 comments

#17 - Data model harmonization.

Issue - State: closed - Opened by dstruck 10 months ago - 2 comments
Labels: enhancement, next-release

#16 - Rework errors in BPF

Issue - State: closed - Opened by qjerome 10 months ago
Labels: medium prio

#15 - bpf_prog_load event "failed to retrieve bpf_prog instructions" error

Issue - State: closed - Opened by dstruck 10 months ago - 2 comments

#14 - Schedule probe "failed to read argv" error

Issue - State: closed - Opened by dstruck 10 months ago - 2 comments
Labels: duplicate

#13 - DNS probe KProbeCtxRestoreFailure

Issue - State: closed - Opened by dstruck 10 months ago - 7 comments
Labels: low prio

#12 - Issue with send_data probe

Issue - State: closed - Opened by qjerome 10 months ago

#11 - File Deletion event

Issue - State: closed - Opened by qjerome 12 months ago - 1 comment
Labels: enhancement

#10 - Kunai Stop Event

Issue - State: open - Opened by qjerome 12 months ago
Labels: enhancement

#9 - Event containing system information

Issue - State: open - Opened by qjerome 12 months ago
Labels: enhancement

#8 - Overwrite Event

Issue - State: open - Opened by qjerome 12 months ago
Labels: R&D

#7 - Update to latest Aya

Issue - State: closed - Opened by qjerome 12 months ago - 1 comment
Labels: high prio

#6 - update bpf-linker to Aya's one

Issue - State: closed - Opened by qjerome 12 months ago - 1 comment

#5 - handle bpf socket attach

Issue - State: closed - Opened by qjerome about 1 year ago - 1 comment
Labels: enhancement

GitHub / kunai-project/kunai issues and pull requests