Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
Repository Index
47,133 repositories indexed
97–120 of 125 · Most stars
LibreELEC x86_64 with Dolby Vision support for Intel, AMD, and Nvidia. I REBASE MY REPO UNTIL THE STABLE RELEASE
Experimental open-source replacement PlayStation 2 BIOS for emulators. MIT licensed.
A single header buddy memory allocator for C & C++
- allocator
- allocators
- memory-allocation
- memory-management
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
Single-header c99 accelerated float/double parsing. Port of the fast_float library.
- c
- high-performance
- neon
- parsing
Android TV 13 for PlayStation 4
Linux Kernel Crypto API User Space Interface Library
A simple GTK application to control brightness of displays including external displays supporting DDC/CI
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp
Sound Blaster emulation for DOS
- dos
- emulation
- soundblaster
A virtual car. Because you wouldn't download a car, would you?
- car
- ecu
- linux-kernel
- automobiles
bpflock - eBPF driven security for locking and auditing Linux machines
Generic eBPF runtime
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
TranslatediOS 26 (arm64e) on Xiaomi 15 / Snapdragon 8 Elite (dada): Running iOS 26 on the Xiaomi 15
- hackios
- hakios
- ios
- ios26
Boot iOS simulator on jailed iOS without JIT
Red Canary's eBPF Sensor
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
The repository host gives no description.
- windbg
- qemu
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.