Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Obtain process token integrity level #206

Open
dfirence opened this issue Nov 2, 2023 · 5 comments
Open

Obtain process token integrity level #206

dfirence opened this issue Nov 2, 2023 · 5 comments
Labels
good first issue needs: docs Indicates that the issue needs documentation updates needs: filters Indicates that new filters should be added scope: filters Anything related to filters scope: process Anything related to process state

Comments

@dfirence
Copy link

dfirence commented Nov 2, 2023

Greetings, thank you for your awesome sensor.

can you extend the Process event to have the integrity levels for the parent and child process`?
@rabbitstack
Copy link
Owner

rabbitstack commented Nov 2, 2023 •
edited

Thanks @dfirence!

Process integrity level, privileges, token information, etc. is certainly on my radar. :)

If I provide some general guidelines on how to enrich process state with this new data, would you be able to pitch in and submit a PR?

@rabbitstack rabbitstack added needs: docs Indicates that the issue needs documentation updates needs: filters Indicates that new filters should be added scope: filters Anything related to filters type: feature Introduces a new functionality scope: process Anything related to process state labels Nov 3, 2023
@rabbitstack rabbitstack changed the title [ Feature ] Process: Enhancement | Process Integrity Obtain process integrity level Nov 3, 2023
@rabbitstack rabbitstack removed the type: feature Introduces a new functionality label Nov 3, 2023
@rabbitstack rabbitstack changed the title Obtain process integrity level Obtain process token integrity level Nov 3, 2023
@dfirence
Copy link
Author

dfirence commented Nov 8, 2023

Hey @rabbitstack - No because I don’t know how to use GoLang correctly. Lemme peruse through your source and see how difficult it is

@rabbitstack
Copy link
Owner

@dfirence you marked this issue as completed but I'm not seeing any backing PRs. Was this intended?

@rabbitstack rabbitstack reopened this Nov 17, 2023
@dfirence
Copy link
Author

@rabbitstack - Dont want to clog up your awesome repo, I cannot use Go for this myself, I can do it in Rust.

@rabbitstack
Copy link
Owner

Understood. It is fine to keep the issue open as I'll be tackling this in near future.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
good first issue needs: docs Indicates that the issue needs documentation updates needs: filters Indicates that new filters should be added scope: filters Anything related to filters scope: process Anything related to process state
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@rabbitstack @dfirence