libsinsp, libscap, the kernel module driver, and the eBPF driver sources
☆302Updated this week
Alternatives and similar repositories for libs
Users that are interested in libs are comparing it to the libraries listed below
Sorting:
- Kit for building Falco drivers: kernel modules or eBPF probes☆69Feb 16, 2026Updated last week
- Falco plugins registry☆113Updated this week
- Falco rule repository☆157Feb 19, 2026Updated last week
- libsinsp, libscap, the kernel module driver, and the eBPF driver sources☆14Oct 12, 2024Updated last year
- Evolution process of The Falco Project☆60Updated this week
- Administrative tooling for Falco☆121Feb 23, 2026Updated last week
- Fetches the metadata from kubernetes API server and dispatches them to Falco instances☆21Feb 17, 2026Updated last week
- Generate a variety of suspect actions that are detected by Falco rulesets☆116Feb 12, 2026Updated 2 weeks ago
- Falco plugins SDK for Rust☆12Feb 20, 2026Updated last week
- Cloud Native Runtime Security☆8,690Feb 23, 2026Updated last week
- BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for em…☆470Feb 18, 2026Updated last week
- Diagrams to visually learn Falco and its eBPF probe☆15Jun 24, 2021Updated 4 years ago
- Web-application used to validate Falco rules and test against scap file☆20Mar 18, 2025Updated 11 months ago
- Falco plugins SDK for Go☆26Jan 29, 2026Updated last month
- Falco workflow & testing infrastructure☆32Updated this week
- eBPF-based Security Observability and Runtime Enforcement☆4,431Updated this week
- Linux Runtime Security and Forensics using eBPF☆4,388Feb 18, 2026Updated last week
- Scaffolding for BPF application development with libbpf and BPF CO-RE☆1,440Feb 5, 2026Updated 3 weeks ago
- ptrace-based event producer for udig☆67Jul 20, 2022Updated 3 years ago
- A crawler for kernel releases distributed by the major Linux distributions.☆13Oct 18, 2024Updated last year
- Vault Exploit Defense☆127Sep 7, 2024Updated last year
- The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing…☆132Feb 20, 2026Updated last week
- Linux Kernel Runtime Integrity with eBPF☆184Nov 23, 2023Updated 2 years ago
- Automated upstream mirror for libbpf stand-alone build.☆2,641Feb 18, 2026Updated last week
- Ansible playbooks to provision firecracker VMs and run Falco kernel tests☆14Feb 17, 2026Updated last week
- Prometheus exporter for custom eBPF metrics☆2,518Feb 9, 2026Updated 2 weeks ago
- This manager helps handle the life cycle of your eBPF programs☆156Feb 18, 2026Updated last week
- ☆28Nov 24, 2021Updated 4 years ago
- Go client and SDK for Falco☆55Jan 19, 2026Updated last month
- Linux system exploration and troubleshooting tool with first class support for containers☆8,208Jan 29, 2026Updated last month
- A Linux Host-based Intrusion Detection System based on eBPF.☆457Dec 20, 2023Updated 2 years ago
- eBPF-based Cloud Native Monitoring Tool☆1,056Oct 25, 2024Updated last year
- Example BPF program with LSM hooks☆36Feb 24, 2021Updated 5 years ago
- ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.☆7,539Updated this week
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆232Jun 2, 2024Updated last year
- A Tool to make Build and Run eBPF programs easier☆853Feb 17, 2026Updated last week
- Get eBPF programs running from the cloud to the kernel in 1 line of bash☆1,295Apr 17, 2025Updated 10 months ago
- eBPF library for Go. Powered by libbpf.☆838Jan 23, 2026Updated last month
- Userspace eBPF VM☆955Feb 21, 2026Updated last week