Code

[CWS] introduce FIM meta rules#32388

Code

Open

paulcacheux wants to merge 9 commits intomainDataDog/datadog-agent:mainfrom paulcacheux/fim-rulesDataDog/datadog-agent:paulcacheux/fim-rulesCopy head branch name to clipboard

+319-55

Commits

Commits on Jan 2, 2025

• [CWS] include rule parsing in rule creation

  paulcacheux

  committed
  a915eb6

• make AddRule return the event category

  paulcacheux

  committed
  4fd7e54

• add fim expansion

  paulcacheux

  committed
  524ea6d

• prevent macro from using FIM event field

  paulcacheux

  committed
  e8cb950

• remove duplicated ID check in (*RuleBucker).AddRule

  paulcacheux

  committed
  4239911

• add basic test

  paulcacheux

  committed
  7c024b4

• add unit tests

  paulcacheux

  committed
  853ba4b

• add group ID in expanded rule ID

  paulcacheux

  committed
  82b29c5

• add more checks in test

  paulcacheux

  committed
  8f01c19