Add the files

1 files changed, 23 insertions, 0 deletions

diff --git a/src/detection/processes/processes_bsd.c b/src/detection/processes/processes_bsd.c
new file mode 100644
index 0000000..e3f02b8
--- /dev/null
+++ b/src/detection/processes/processes_bsd.c
@@ -0,0 +1,23 @@
+#include "processes.h"
+
+#include <sys/sysctl.h>
+#ifdef __FreeBSD__
+    #include <sys/types.h>
+    #include <sys/user.h>
+#endif
+
+#ifndef KERN_PROC_PROC
+    #define KERN_PROC_PROC KERN_PROC_ALL // Apple
+#endif
+
+const char* ffDetectProcesses(uint32_t* result) {
+    int request[] = { CTL_KERN, KERN_PROC, KERN_PROC_PROC };
+    size_t length;
+
+    if (sysctl(request, ARRAY_SIZE(request), NULL, &length, NULL, 0) != 0) {
+        return "sysctl({CTL_KERN, KERN_PROC, KERN_PROC_PROC}) failed";
+    }
+
+    *result = (uint32_t) (length / sizeof(struct kinfo_proc));
+    return NULL;
+}