eBPF-based Security Observability and Runtime Enforcement
Repository Index
47,133 repositories indexed
1–7 of 7 · Most stars
ebpfkit is a rootkit powered by eBPF
Generic eBPF runtime
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
OPAL boot and runtime firmware for POWER
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser