Skip to content

Commit

Permalink
updating policies overview
Browse files Browse the repository at this point in the history
Signed-off-by: AnaisUrlichs <[email protected]>
  • Loading branch information
AnaisUrlichs authored and josedonizetti committed Jul 19, 2023
1 parent 0c5719a commit eb4c02d
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion docs/docs/policies/index.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,9 @@
In this section you can find the reference documentation for Tracee's policies.

A policy is a yaml document where you can specify a scope and associate it with a set of rules. A scope defines the workloads to which the policy applies. A rule defines events to be matched and actions to take on them.
Policies are YAML manifests that allow you to define how Tracee should respond to different events. This is done through rules in the policy. A rule takes in one or several events. Additionally, events can be filtered to specific resources. If Tracee detects the event, it will respond with an action.
The default action for Tracee is to log the detected events.

Lastly, policies require a scope. The scope details which resources the policy applies to.

You can load multiple (up to 64) policies into Tracee using the --policy flag providing a path to the policy file.

Expand Down

0 comments on commit eb4c02d

Please sign in to comment.