isEntryHTTPS determines if an audit log entry represents an HTTPS request. CONNECT method is the standard signal for HTTPS tunneling.
(entry AuditLogEntry)
| 228 | // isEntryHTTPS determines if an audit log entry represents an HTTPS request. |
| 229 | // CONNECT method is the standard signal for HTTPS tunneling. |
| 230 | func isEntryHTTPS(entry AuditLogEntry) bool { |
| 231 | return strings.EqualFold(entry.Method, "CONNECT") |
| 232 | } |
| 233 | |
| 234 | // isEntryAllowed determines the observed outcome of a request. |
| 235 | // This mirrors the classification logic used by the firewall log parser. |
no outgoing calls