betterstack-procguard

Monitor the list of processes on a Unix / Linux / BSD machine and report any unexpected processes to BetterStack.com as failed heartbeats.

Usage

procguard [BETTERSTACK_HEARTBEAT_ID] 5

It verifies the process list on the local machine every 5 seconds. When a new unknown process appears, it sends a failed heartbeat HTTP request to BetterStack.com API.

You can define allowed process names in $HOME/.config/procguard-watchdog.inc

You can use literal full paths like

/bin/bash

or substrings like:

node_modules/@esbuild/darwin-x64/bin/esbuild

Installation

macOS

brew tap goodylabs/betterstack-procguard https://github.com/goodylabs/betterstack-procguard
brew install procguard

Linux

1. Get the latest snap from https://github.com/goodylabs/betterstack-procguard/actions -> choose details of the latest run
2. Download procguard artifact as procguard.zip
3. Run the following on your Linux machine

unzip procguard.zip
sudo snap install procguard_1.3_amd64.snap --dangerous --classic