LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
Repository Index
47,133 repositories indexed
25–43 of 43 · Most stars
A Suricata based NDR distribution
- suricata
- network
- security
- monitoring
NFF-Go -Network Function Framework for GO (former YANFF)
- dpdk
- golang
- networking
- vnf
Vocat is an open-source web control panel and engineering toolkit for Quectel EC20/EC25-class cellular modems. It combines modem discovery, live radio status, AT and USSD terminals, SMS, WiFi Calling, eSIM management, network selection, proxy routing, notifications, audit logs, and release automation in one self-contained service.
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
🍁 Generate infrastructure and network diagrams directly from your NixOS configurations
- architecture
- diagram
- diagram-generator
- flake
Functional Network Framework for Multi-Core Architectures
Network Stack in Userspace
A high performance, multi-threaded C# file download library.
- c-sharp
- download
- parallel
- downloader
A Lightweight VPN Built on top of IPFS + Libp2p for Truly Distributed Networks (fork)
Monitor and profiler powered by eBPF to monitor network traffic, and diagnose CPU and network performance.
- skywalking
- observability
- apm
- service-mesh
An In-Kernel Solution Based on eBPF / XDP for 5G UPF
- 5g-core-network
- upf
- 5gc
- 5g-core
Umbrella package of the 'spatstat' family................
- r
- spatial-analysis
- spatial-data
- spatstat
A Highly Accessible and Automated Virtualization Platform for Security Education
- cybersecurity
- virtualization
- docker
- virtualbox
TranslatedA lightweight floating desktop monitor for Windows: battery power consumption and runtime, CPU/GPU/memory usage and power consumption, network speed, real latency, and disconnection alerts. Native C++ / Direct2D, with mini mode using about 0.1% CPU.
- battery
- cpp
- desktop-widget
- direct2d
A Go package for sending and receiving ethernet frames. Currently supporting Linux, Freebsd, and OS X.
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
- cpp20
- ebpf
- event-logger
- filesystem