Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rule update: add rules for crypto mining #763

Merged
merged 2 commits into from Aug 12, 2019
Merged

rule update: add rules for crypto mining #763

merged 2 commits into from Aug 12, 2019

Conversation

@Kaizhe
Copy link
Contributor

Kaizhe commented Aug 6, 2019

Signed-off-by: kaizhe derek0405@gmail.com

What type of PR is this?
Add rules detect crypto mining

Uncomment one (or more) /kind <> lines:

/kind bug

/kind cleanup

/kind design

/kind documentation

/kind failing-test

/kind feature

/kind flaky-test

If contributing rules or changes to rules, please make sure to also uncomment one of the following line:

/kind rule-update

/kind rule-create

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area engine

/area rules

/area deployment

/area integrations

/area examples

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #
N/A
Special notes for your reviewer:

Does this PR introduce a user-facing change?:

rules: Add rules to detect crypto mining activities
@Kaizhe

This comment has been minimized.

Copy link
Contributor Author

Kaizhe commented Aug 6, 2019

19:01:53.495264405: Critical Outbound connection to IP/Port flagged by cryptoioc.ch (syscall=sendto command=curl ca.minexmr.com port=80 ip=158.69.25.62 container=host (id=host) image=<NA>)```
@poiana poiana removed the needs-kind label Aug 6, 2019
@Kaizhe Kaizhe requested a review from fntlnz Aug 7, 2019
@poiana

This comment has been minimized.

Copy link

poiana commented Aug 7, 2019

LGTM label has been added.

Git tree hash: 46b98a8f53b33a5fdec33f0417a553d27c2a44f7

@fntlnz

This comment has been minimized.

Copy link
Member

fntlnz commented Aug 8, 2019

@Kaizhe this needs a rebase

Kaizhe added 2 commits Aug 6, 2019
Signed-off-by: kaizhe <derek0405@gmail.com>
Signed-off-by: kaizhe <derek0405@gmail.com>
@Kaizhe Kaizhe force-pushed the rule-updates-2019-08.v1 branch from 952d3b8 to f1c0dfa Aug 8, 2019
@poiana poiana removed lgtm approved labels Aug 8, 2019
@leodido
leodido approved these changes Aug 8, 2019
@poiana poiana added the lgtm label Aug 8, 2019
@poiana

This comment has been minimized.

Copy link

poiana commented Aug 8, 2019

LGTM label has been added.

Git tree hash: 3d36ef32c41fc026e3f3facb6c54f6e44964c1d7

@poiana poiana added the approved label Aug 8, 2019
@fntlnz
fntlnz approved these changes Aug 9, 2019
@poiana

This comment has been minimized.

Copy link

poiana commented Aug 9, 2019

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fntlnz, leodido

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@Kaizhe Kaizhe removed the request for review from mstemm Aug 9, 2019
@fntlnz fntlnz merged commit 1fc509d into dev Aug 12, 2019
6 of 7 checks passed
6 of 7 checks passed
tide Not mergeable. Job Travis CI - Pull Request has not succeeded.
Build Build Successful
Details
Run tests All tests passed
Details
Travis CI - Branch Build Passed
Details
Travis CI - Pull Request Build Passed
Details
continuous-integration/jenkins/branch This commit looks good
Details
dco All commits have Signed-off-by
Details
@poiana poiana deleted the rule-updates-2019-08.v1 branch Aug 12, 2019
@leodido leodido added this to the 0.18.0 milestone Aug 22, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.