armosec/kubecop

Get syscall events with parameters

Opened this issue · 2 comments

amitschendel commented

We need to get not just the syscall but also the params, so we can tell for example if ptrace attach occurred.

slashben commented

Wouldn't this need a ticket on https://github.com/kubescape/kapprofiler/ as well?

  • 👍1