From 76424950e373d3b04ac3dd13019151bfba3e8423 Mon Sep 17 00:00:00 2001
From: sumuel <samuel@yakubos.org>
Date: Mon, 17 Aug 2026 20:44:55 +0000
Subject: Add the files

---
 src/detection/processes/processes_bsd.c | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 src/detection/processes/processes_bsd.c

(limited to 'src/detection/processes/processes_bsd.c')

diff --git a/src/detection/processes/processes_bsd.c b/src/detection/processes/processes_bsd.c
new file mode 100644
index 0000000..e3f02b8
--- /dev/null
+++ b/src/detection/processes/processes_bsd.c
@@ -0,0 +1,23 @@
+#include "processes.h"
+
+#include <sys/sysctl.h>
+#ifdef __FreeBSD__
+    #include <sys/types.h>
+    #include <sys/user.h>
+#endif
+
+#ifndef KERN_PROC_PROC
+    #define KERN_PROC_PROC KERN_PROC_ALL // Apple
+#endif
+
+const char* ffDetectProcesses(uint32_t* result) {
+    int request[] = { CTL_KERN, KERN_PROC, KERN_PROC_PROC };
+    size_t length;
+
+    if (sysctl(request, ARRAY_SIZE(request), NULL, &length, NULL, 0) != 0) {
+        return "sysctl({CTL_KERN, KERN_PROC, KERN_PROC_PROC}) failed";
+    }
+
+    *result = (uint32_t) (length / sizeof(struct kinfo_proc));
+    return NULL;
+}
-- 
cgit v1.2.3