Code

Add socketfilterfw parser table#1812

Code

Merged

Micah-Kolide merged 9 commits intomainkolide/launcher:mainfrom micah/add_socketfilterfw_exec_tablekolide/launcher:micah/add_socketfilterfw_exec_tableCopy head branch name to clipboardAug 1, 2024

+280

Commits

Commits on Aug 1, 2024

• Add socketfilterfw exec parser (without tests for now)

  Micah-Kolide

  committed
  453b87f

  Copy full SHA for 453b87f

• Fix signed keys since there are two not a single one, and only append if the row has data in it

  Micah-Kolide

  committed
  e99773f

  Copy full SHA for e99773f

• Add tests

  Micah-Kolide

  committed
  145d0d4

  Copy full SHA for 145d0d4

• Clean up logic, remove extra regex, increase validation, and beef up malformed test

  Micah-Kolide

  committed
  f64ffa0

  Copy full SHA for f64ffa0

• Slightly adjust malformed test to include more states of the data

  Micah-Kolide

  committed
  1b6eb3d

  Copy full SHA for 1b6eb3d

• Add socketfilterfw apps list table, add apps list test data, update parsers handling of rows

  Micah-Kolide

  committed
  50cc900

  Copy full SHA for 50cc900

• Remove useless assignment

  Micah-Kolide

  committed
  fe557c4

  Copy full SHA for fe557c4

• Format code

  Micah-Kolide

  committed
  41d0f13

  Copy full SHA for 41d0f13

• Split out different parse methods

  Micah-Kolide

  committed
  2a7fcf9

  Copy full SHA for 2a7fcf9