Repository Index

Performance analysis tools based on Linux perf_events (aka perf) and ftrace

High-level tracing language for Linux

• bpf
• ebpf
• tracing
• kprobes

Function graph tracer for C/C++/Rust/Python

• function
• tracer
• tracing
• trace

Schedule bpftrace programs on your kubernetes cluster using the kubectl

• kubectl
• kubernetes-cluster
• kubectl-trace
• bpf

Stealthy Linux Kernel Rootkit

• ftrace
• hooking
• kernel
• linux

Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootkits, ftrace, eBPF, and defensive strategies.