Alternatives and similar repositories for knockles

Users that are interested in knockles are comparing it to the libraries listed below

• evilsocket / ebpf-process-anomaly-detection
  Process behaviour anomaly detection using eBPF and unsupervised-learning Autoencoders
  ☆133Updated 3 years ago
• krisnova / xpid
  Linux Process Discovery. C Library, Go bindings, Runtime.
  ☆223Updated 3 years ago
• citronneur / pamspy
  Credentials Dumper for Linux using eBPF
  ☆1,148Updated last year
• Gui774ume / ssh-probe
  monitor and protect SSH sessions with eBPF
  ☆70Updated 4 years ago
• h2337 / modreveal
  Utility to find hidden Linux kernel modules
  ☆146Updated 3 months ago
• quarkslab / peetch
  An eBPF playground
  ☆209Updated last year
• exein-io / kepler
  NIST-based CVE lookup store and API powered by Rust.
  ☆133Updated last month
• armosec / curing
  io_uring based rootkit
  ☆241Updated 6 months ago
• jorisvink / sanctum
  Blessed sanctum, save us || Sanctum is a small, reviewable, capable, pq-secure and fully privilege seperated VPN daemon. || This is a rea…
  ☆80Updated this week
• scottgerring / minderbinder
  Use eBPF to inject chaos into local processes
  ☆65Updated last year
• c-grimshaw / gosniff
  A fancy-schmancy tcpdump-esque TUI, programmed in Go.
  ☆374Updated 3 years ago
• redcanaryco / ebpfmon
  ☆89Updated last year
• TimeToogo / remote-pty
  Tricking shells into interactive mode when local PTY's are not available
  ☆145Updated 3 years ago
• criblio / appscope
  Gain observability into any Linux command or application with no code modification
  ☆283Updated last year
• adgaultier / tamanoir
  An eBPF🐝 Keylogger with C2-based RCE payload delivery
  ☆298Updated 5 months ago
• guardicore / IPCDump
  ☆246Updated 4 years ago
• aojea / netkat
  netcat using netstack userspace library and eBPF
  ☆137Updated 4 years ago
• exein-io / pulsar
  A modular and blazing fast runtime security tool for the IoT, powered by eBPF.
  ☆980Updated last week
• noisysockets / nsh
  The Noisy Sockets CLI
  ☆263Updated last year
• jamespwilliams / dns-over-ping
  DNS-over-ping(8)
  ☆126Updated 2 years ago
• redcanaryco / oxidebpf
  A Rust library for managing eBPF programs.
  ☆122Updated last year
• hackerschoice / zapper
  Zaps arguments and environment from the process list
  ☆234Updated last year
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆150Updated 3 years ago
• harporoeder / ebpfsnitch
  Linux Application Level Firewall based on eBPF and NFQUEUE.
  ☆704Updated last year
• synacktiv / io_uring_scanner
  io_uring based network scanner written in Rust
  ☆44Updated 2 years ago
• rpetrich / callander
  Simple syscall sandboxing for Linux
  ☆143Updated last week
• liamg / siphon
  Intercept stdin/stdout/stderr for any process
  ☆199Updated 3 years ago
• leomos / dwgd
  Docker WireGuard Driver
  ☆122Updated last year
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆111Updated 4 months ago
• PurpleVsGreen / beacown
  ☆129Updated 3 years ago