eBPF-based Security Observability and Runtime Enforcement
Repository Index
47,133 repositories indexed
1–6 of 6 · Most stars
QEMU Interactive Runtime Analyser
ebpfkit is a rootkit powered by eBPF
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser