Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add normalization for exit_group syscall #149

Merged
merged 2 commits into from
Jan 22, 2024

Conversation

mjwolf
Copy link
Contributor

@mjwolf mjwolf commented Jan 22, 2024

The exit_group syscall terminates all threads in a process, and is normally used to exit a process. This normalization adds 'end' action and type to the process ECS document.

The exit_group syscall terminates all threads in a process, and is normally
used to exit a process. This normalization adds 'end' action and type to the
process ECS document.
andrewkroh
andrewkroh previously approved these changes Jan 22, 2024
Copy link
Member

@andrewkroh andrewkroh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Can please add a line to changelog file before merging.

@elasticmachine
Copy link
Collaborator

💚 Build Succeeded

History

@mjwolf mjwolf merged commit 9347192 into elastic:main Jan 22, 2024
3 checks passed
@mjwolf mjwolf deleted the normalize_exit_group branch January 22, 2024 23:44
renini pushed a commit to renini/go-libaudit that referenced this pull request Jun 26, 2024
The exit_group syscall terminates all threads in a process, and is normally
used to exit a process. This normalization adds 'end' action and type to the
process ECS document.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants