Repository Index

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

• rootkit
• lkm-rootkit
• c
• kernel

ebpfkit is a rootkit powered by eBPF

• ebpf
• security
• rootkit
• linux

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

• ebpf
• security
• linux-kernel
• linux-security-module

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

Cross-compile the Linux kernel for Raspberry Pi with enhanced security in a single command.

• raspberry-pi
• linux-kernel
• raspberrypi-kernel
• security

Open-source eBPF compatibility evidence and CI gate

• bpf
• ci
• compatibility
• ebpf

A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.

• cpp20
• ebpf
• event-logger
• filesystem