Yelp / pidtree-bccLinks
eBPF tool for logging process ancestry of outbound TCP connections
☆45Updated last week
Alternatives and similar repositories for pidtree-bcc
Users that are interested in pidtree-bcc are comparing it to the libraries listed below
Sorting:
- ptrace-based event producer for udig☆67Updated 3 years ago
- Simplifying Seccomp enforcement in containerized or non-containerized apps☆112Updated 5 years ago
- Build custom Docker seccomp profiles for containers by finding syscalls it uses.☆91Updated 3 months ago
- Kit for building Falco drivers: kernel modules or eBPF probes☆69Updated this week
- BPF based FIM solution☆42Updated 2 years ago
- The Container Security Book—a free book for practitioners☆83Updated 5 years ago
- Easier tracing of packets through iptables☆35Updated 7 months ago
- Docker Secure Computing Profile Generator☆49Updated 4 years ago
- eBPF based syscalls, files and network events tracing framework☆92Updated 5 years ago
- A tool to list and diagnose bpf programs. (Who watches the watchers..? :)☆95Updated 5 years ago
- agent for handling seccomp descriptors for container runtimes☆47Updated 2 years ago
- Tools for kubernetes pod network tapping☆42Updated 6 years ago
- Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups u…☆200Updated 2 years ago
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆119Updated last month
- ☆41Updated 5 years ago
- traffic control daemon☆21Updated 8 years ago
- ☆37Updated 5 years ago
- IOModule manager and plugins☆37Updated 8 years ago
- ☆29Updated last year
- A command line tool to automatically generate seccomp profiles.☆27Updated 4 years ago
- Experimental CLI that takes a Docker image url and runs it in a Firecracker VM☆65Updated 7 years ago
- Cloud Native Security Hub - Security Resources☆54Updated 5 years ago
- PAL: A secret bootstrapping tool for Docker☆85Updated last year
- Inject Falco and pdig into a running kubernetes pod☆13Updated 5 years ago
- ☆134Updated 7 months ago
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆137Updated 11 months ago
- cloud native software supply chain ☁️🔗☆65Updated 4 years ago
- Convert Falco logs to Docker seccomp profiles☆21Updated 9 years ago
- Falco Running with Ptrace(2) for Kernel Events☆37Updated 5 years ago
- Falco container runtime security extras (default rulesets and more)☆49Updated 6 years ago