DWARF-aware eBPF tracer for source-level userspace tracing - Explore in a TUI or automate with a scriptable CLI
Repository Index
47,133 repositories indexed
49–72 of 73 · Most stars
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp
bpflock - eBPF driven security for locking and auditing Linux machines
Generic eBPF runtime
Mount the InterPlanetary File System as a mapped drive on Windows
A cargo-generate template for Rust eBPF Projects using Aya
- cargo-generate
- ebpf
- rust
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Low-overhead sampling profiler and tracer for Ruby for Linux
- ruby
- bpf
- performance
- profilers
Red Canary's eBPF Sensor
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
eBPF explorer is Web UI that lets you see all the maps and programs in eBPF subsystem
The repository host gives no description.
An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers
eBPF Security Monitoring and Sandboxing Agent Based on Aya
OpenCSD: eBPF Computational Storage Device (CSD) for Zoned Namespace (ZNS) SSDs in QEMU
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
VALE eBPF extension module
eBPF-based pod-level kernel metrics collector for Kubernetes
- cgroup
- daemonset
- ebpf
- helm-chart
A joke IPX implementation for Linux using eBPF.
greg(g)d - Global runtime for eBPF-enabled gathering (w/ gumption) daemon
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
- cpp20
- ebpf
- event-logger
- filesystem
eBPF system monitor that runs inside the kernel. Sub-millisecond samples, zero allocations, faster than top.
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.