A lightweight, extensible forensic tool that leverages eBPF to collect real-time system events on Windows for Digital Forensics and Incident Response.
☆20Aug 26, 2025Updated last year
Alternatives and similar repositories for eBPF-for-DFIR
Users that are interested in eBPF-for-DFIR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Code-snippets for developing eBPF programs☆22Oct 6, 2025Updated 10 months ago
- This project is a minimal eBPF-based Layer 4 (Transport Layer) network monitor that uses tc (Traffic Control) hooks to trace ingress and …☆29Aug 26, 2025Updated last year
- vxlan protocol / unknown unicast flooding technique + eBPF☆25Jul 4, 2026Updated last month
- DNS filtering with eBPF☆20Nov 6, 2025Updated 9 months ago
- eBPF-based tool can trace GPU memory leaks by processes in Linux.☆15Sep 26, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Implementing TCP/IP in Rust leveraging eBPF/XDP☆21Mar 30, 2025Updated last year
- Listen to database queries going through your system with eBPF☆19Aug 3, 2025Updated last year
- ☆14Sep 11, 2019Updated 6 years ago
- Real-time TCP CWND monitoring and analysis toolkit using eBPF kernel technology☆16Apr 28, 2026Updated 4 months ago
- Script to check ModSecurity rules agains some WAF☆12Oct 15, 2018Updated 7 years ago
- A developer tool for disassembling, analyzing, debugging, and visualizing BPF object files.☆26Feb 11, 2026Updated 6 months ago
- eBPF Security Monitoring and Sandboxing Agent Based on Aya☆58Updated this week
- A Python-base EBPF code generator☆38Jun 22, 2026Updated 2 months ago
- A high-performance, distributed Zero Trust firewall using eBPF/XDP. Aegis enforces identity-based micro-segmentation, dynamically opening…☆50Apr 19, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- a CLI tool for generating logs and metrics from eBPF telemetry, producing flamegraphs and actionable observability outputs☆16Mar 28, 2025Updated last year
- ☆17Jan 30, 2025Updated last year
- Go module for running eBPF programs without root privileges or kernel eBPF support, powered by bpftime.☆15Feb 9, 2026Updated 6 months ago
- eBPF-based Ethernet traffic monitor using TC, XDP, kprobes and cgroups☆150Updated this week
- Building Truly Portable eBPF Programs☆22Apr 26, 2025Updated last year
- A collection of Docker and Kubernetes resources☆18Nov 14, 2022Updated 3 years ago
- Helping people get healthier through organic nutrition☆12Jul 10, 2024Updated 2 years ago
- Build the Linux kernel into OCI images, suitable for Edera products.☆23Aug 21, 2026Updated last week
- XDP Based Lightweight and Fast Firewall☆71Feb 23, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Simple tool to extract icons from a pe file and other useful information☆13Jun 22, 2018Updated 8 years ago
- A port of Brendan Gregg's eBPF profile.py application to Golang.☆29Mar 25, 2025Updated last year
- Demo repository for running eBPF in GitHub Actions☆23Mar 27, 2025Updated last year
- Inspect SSL/TLS traffic using eBPF☆21Oct 19, 2024Updated last year
- Wasp: micro-hypervisor that enables lightweight, isolated virtines☆21Mar 31, 2023Updated 3 years ago
- eBPF container escape detector prototype | Kernel 6.8+ | Early dev phase | Expect kernel panics ⚠️☆16Apr 27, 2026Updated 4 months ago
- cuPQC SDK Developer Hub: samples, integration guides, and technical/release blogs☆17Updated this week
- Script for automating Linux memory capture and analysis☆12May 6, 2020Updated 6 years ago
- ☆23Jul 1, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Orchestration and memory for multi-agent systems☆17Aug 19, 2026Updated last week
- Python 3 library to build YARA rules.☆13Oct 24, 2021Updated 4 years ago
- eBPF practice and learning repo☆18Dec 7, 2025Updated 8 months ago
- Example architectures utilizing DevSecOps principles to deploy F5 Application Delivery and Security Platform solutions.☆23Sep 25, 2025Updated 11 months ago
- OCI images for the curious.☆12Mar 21, 2022Updated 4 years ago
- K8s Limits Auto Resizer A tool for automatically optimizing Kubernetes resource limits and requests based on historical usage patterns.☆19Dec 6, 2025Updated 8 months ago
- ☆23Jul 19, 2019Updated 7 years ago