NationalSecurityAgency / seabeeLinks
Hardens eBPF tools against privileged attackers via policy-based access controls
☆51Updated last month
Alternatives and similar repositories for seabee
Users that are interested in seabee are comparing it to the libraries listed below
Sorting:
- [Experimental] jail for Go modules☆103Updated this week
- A layer 2 switch for VMs powered by eBPF☆44Updated 9 months ago
- A project to collect eBPF verifier errors and how they can be resolved☆48Updated 11 months ago
- TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool☆127Updated last week
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆232Updated last year
- A tool to help programmers debug and analyze Linux Kernel BPF verification failures.☆64Updated 2 weeks ago
- A tool for in-depth analysis of container checkpoints☆127Updated this week
- tool for building and running VMs for development and testing☆110Updated this week
- A replacement for "kubectl exec" that works over WebSocket connections.☆42Updated last year
- This repo contains various examples to learn, explore, and experiment with eBPF.☆63Updated 2 months ago
- agent for handling seccomp descriptors for container runtimes☆47Updated last year
- ☆33Updated last year
- An query language and interactive tooling to work with SBOM data.☆14Updated last year
- Shape your traffic the BPF way☆80Updated 2 years ago
- 🔍 Function-level tracing tool for Seccomp profiling, with eBPF☆174Updated last month
- OCI hook to trace syscalls and generate a seccomp profile☆338Updated last week
- A CLI used to work with the Wolfi OSS project☆67Updated this week
- Security Observation Tool written in Rust inspired by Tetragon☆27Updated 4 months ago
- NAT64 agent for Kubernetes deployments☆27Updated 4 months ago
- Threat-informed defense for cloudnative: Reference Implementation of a so-called Honeycluster - The detection capabilities can also be us…☆55Updated this week
- Transparent Proxy Implementation using eBPF and Go☆86Updated last year
- eBPF Map Prometheus Exporter☆25Updated 4 months ago
- Goby CLI eBPF Project Generator☆33Updated 10 months ago
- Jibril: A performant and low impact Linux runtime security tool agent.☆13Updated 6 months ago
- This repository contains various code snippets and learnings around eBPF☆84Updated last year
- Code-snippets for developing eBPF programs☆17Updated 2 months ago
- eBPF OOM Memory Profiler☆122Updated 2 weeks ago
- DRANET is a Kubernetes Network Driver that uses Dynamic Resource Allocation (DRA) to deliver high-performance networking for demanding ap…☆159Updated last week
- Ingress node firewall implements Kubernetes operator to provision stateless ingress node level firewall rules, stateless ingress node fir…☆71Updated this week
- Code coverage tooling for eBPF☆38Updated last year