1 files changed, 15 insertions, 0 deletions
diff --git a/src/detection/processes/processes_obsd.c b/src/detection/processes/processes_obsd.c
new file mode 100644
index 0000000..6246d8f
--- /dev/null
+++ b/src/detection/processes/processes_obsd.c
@@ -0,0 +1,15 @@
+#include "processes.h"
+
+#include <sys/param.h>
+#include <sys/sysctl.h>
+#include <kvm.h>
+
+const char* ffDetectProcesses(uint32_t* result) {
+    kvm_t* kd = kvm_open(NULL, NULL, NULL, KVM_NO_FILES, NULL);
+    const void* ret = kvm_getprocs(kd, KERN_PROC_ALL, 0, 1, result);
+    kvm_close(kd);
+    if (!ret) {
+        return "kvm_getprocs() failed";
+    }
+    return NULL;
+}