A lightweight, extensible forensic tool that leverages eBPF to collect real-time system events on Windows for Digital Forensics and Incident Response.
☆20Aug 26, 2025Updated last year
Alternatives and similar repositories for eBPF-for-DFIR
Users that are interested in eBPF-for-DFIR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Code-snippets for developing eBPF programs☆22Oct 6, 2025Updated 11 months ago
- ☆15Aug 23, 2020Updated 6 years ago
- DNS filtering with eBPF☆20Nov 6, 2025Updated 10 months ago
- eBPF-based tool can trace GPU memory leaks by processes in Linux.☆15Sep 26, 2025Updated 11 months ago
- Implementing TCP/IP in Rust leveraging eBPF/XDP☆21Mar 30, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Listen to database queries going through your system with eBPF☆19Aug 3, 2025Updated last year
- High-Performance XDP Firewall & Traffic Analyzer written in Rust.☆20Aug 8, 2026Updated last month
- A developer tool for disassembling, analyzing, debugging, and visualizing BPF object files.☆26Feb 11, 2026Updated 7 months ago
- Android malware static & dynamic analysis and automated action (deprecated)☆21May 18, 2021Updated 5 years ago
- eBPF Security Monitoring and Sandboxing Agent Based on Aya☆65Updated this week
- A high-performance, distributed Zero Trust firewall using eBPF/XDP. Aegis enforces identity-based micro-segmentation, dynamically opening…☆52Sep 9, 2026Updated last week
- a CLI tool for generating logs and metrics from eBPF telemetry, producing flamegraphs and actionable observability outputs☆16Mar 28, 2025Updated last year
- Demo repository for all the different ways to do eBPF Tracing☆19Feb 9, 2026Updated 7 months ago
- ☆17Jan 30, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 'SWEETMON' is a fuzzer monitoring service based python3 + django. User can check their fuzzers and crashes on the web. It can reduce repe…☆17Jun 5, 2020Updated 6 years ago
- MCP server: using eBPF to tracing your kernel☆73Feb 12, 2026Updated 7 months ago
- Go module for running eBPF programs without root privileges or kernel eBPF support, powered by bpftime.☆15Feb 9, 2026Updated 7 months ago
- eBPF-based Ethernet traffic monitor using TC, XDP, kprobes and cgroups☆151Sep 7, 2026Updated last week
- My favorite Claude Code tips & tricks☆96Updated this week
- Building Truly Portable eBPF Programs☆22Apr 26, 2025Updated last year
- A collection of Docker and Kubernetes resources☆18Nov 14, 2022Updated 3 years ago
- High-throughput, in-kernel network packet classification using machine learning (Proof-of-Concept)☆15Aug 11, 2025Updated last year
- Build the Linux kernel into OCI images, suitable for Edera products.☆23Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- XDP Based Lightweight and Fast Firewall☆71Feb 23, 2026Updated 6 months ago
- Simple tool to extract icons from a pe file and other useful information☆13Jun 22, 2018Updated 8 years ago
- Inspect SSL/TLS traffic using eBPF☆21Oct 19, 2024Updated last year
- eBPF container escape detector prototype | Kernel 6.8+ | Early dev phase | Expect kernel panics ⚠️☆16Apr 27, 2026Updated 4 months ago
- ☆23Jul 1, 2026Updated 2 months ago
- Orchestration and memory for multi-agent systems☆17Aug 19, 2026Updated last month
- This eBPF module will drop any IPv4 packets that have the RFC 3514 "evil bit" set.☆19Jun 16, 2025Updated last year
- Python 3 library to build YARA rules.☆13Oct 24, 2021Updated 4 years ago
- eBPF-For-Windows extension to provide access to Windows kernel functionality☆55Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Universal Malware Sample Encryption☆13Jan 5, 2024Updated 2 years ago
- Linux /proc data in a consistent, parsed format.☆10Mar 28, 2016Updated 10 years ago
- Real time controller for network functions instrumented with the jbpf framework☆18Updated this week
- OCI images for the curious.☆12Mar 21, 2022Updated 4 years ago
- K8s Limits Auto Resizer A tool for automatically optimizing Kubernetes resource limits and requests based on historical usage patterns.☆19Dec 6, 2025Updated 9 months ago
- Get a list of installed software in a safe manner☆11Aug 7, 2017Updated 9 years ago
- ☆20Aug 6, 2025Updated last year