Linux Runtime Security and Forensics using eBPF
Repository Index
47,133 repositories indexed
1–5 of 5 · Most stars
ebpfkit is a rootkit powered by eBPF
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
eBPF Security Monitoring and Sandboxing Agent Based on Aya
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.