Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
- ebpf
- ebpf-co-re
- linux-kernel
Repository Index
47,133 repositories indexed
1–5 of 5 · Most stars
Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.
Sample ebpf programs to analyze
- ebpf
- ebpf-programs
- ebpf-opcode
Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.
An example of an eBPF program hooking into the kill tracepoint