Corvo

• RSS feed
• Atom feed

corvo is an auditd plugin that reassembles the raw fragments of Linux audit and delivers coherent events as JSON. ninho is the server that receives from the whole fleet, keeps it in PostgreSQL and shows it.

Porto Alegre, Brazil

https://corvo.rda.run

Repositories

2

Projects Packages

Filter

Clear filters

Archived Not archived

Forks Not forks

Mirrors Not mirrors

Templates Not templates

Private Public

Sort

Newest Oldest Alphabetically Reverse alphabetically Recently updated Least recently updated Most stars Fewest stars Most forks Fewest forks Smallest size Largest size

ninho

Go 0 0

One Go binary with the web UI embedded inside it, and a PostgreSQL behind it. Nothing else has to be installed on the server: a single static file to copy onto the machine.

Updated 2026-10-16 13:56:27 -03:00

corvo

Go 0 0

corvo runs as an auditd plugin on every audited machine. auditd stays the owner of the rules and the buffer, writes each line to corvo stdin and restarts the process if it dies.

Updated 2026-09-21 13:42:41 -03:00