8
edits
Security/Mentorships/MWoS/2014/Linux Audit heka plugin (Go): Difference between revisions
Security/Mentorships/MWoS/2014/Linux Audit heka plugin (Go) (view source)
Revision as of 17:19, 31 August 2014
, 31 August 2014→Roadmap
| Line 25: | Line 25: | ||
=== Roadmap === | === Roadmap === | ||
* Get more familiar with Go [August 18 2014] | |||
* Get more familiar with Go | * Work on communication using Netlink (receive audit messages from the kernel) [September 6 2014] | ||
* Work on communication using Netlink (receive audit messages from the kernel) | * Port the netlink code as Heka Plugin and start working with lua. [September 17 2014] | ||
* Store messages in some structure/process them (lua) | * Store messages in some structure/process them (lua) [September 24 2014] | ||
* Correlate the kernel messages into a single mozdef-json message | * Correlate the kernel messages into a single mozdef-json message [September 31 2014] | ||
* | * Send the message back to MozDef (can be done through Heka functions) over HTTPS [October 13 2014] | ||
== Updates == | == Updates == | ||