eBPF-based Security Observability and Runtime Enforcement
Repository Index
47,133 repositories indexed
1–5 of 5 · Most stars
ebpfkit is a rootkit powered by eBPF
Generic eBPF runtime
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.