eBPF Security Monitoring and Sandboxing Agent Based on Aya
Repository Index
47,133 repositories indexed
49–60 of 60 · Most stars
OpenCSD: eBPF Computational Storage Device (CSD) for Zoned Namespace (ZNS) SSDs in QEMU
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
VALE eBPF extension module
eBPF-based pod-level kernel metrics collector for Kubernetes
- cgroup
- daemonset
- ebpf
- helm-chart
A joke IPX implementation for Linux using eBPF.
greg(g)d - Global runtime for eBPF-enabled gathering (w/ gumption) daemon
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
- cpp20
- ebpf
- event-logger
- filesystem
eBPF system monitor that runs inside the kernel. Sub-millisecond samples, zero allocations, faster than top.
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.
The repository host gives no description.