auditd on builders #50
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
(Low priority)
Figuring out a simple auditd configuration for builders and ship it to meta01 or similar for further review/forensics would be great.
Plain auditd, or something much nicer and easier to read and still fairly simple like https://github.com/threathunters-io/laurel?
We could collect laurel's json logs via Grafana Agent and sent them to Loki.
I would go for Laurel personally, yes.