libsinsp, libscap, the kernel module driver, and the eBPF driver sources
☆302Mar 20, 2026Updated this week
Alternatives and similar repositories for libs
Users that are interested in libs are comparing it to the libraries listed below
Sorting:
- Kit for building Falco drivers: kernel modules or eBPF probes☆69Mar 9, 2026Updated last week
- Falco plugins registry☆114Updated this week
- libsinsp, libscap, the kernel module driver, and the eBPF driver sources☆14Oct 12, 2024Updated last year
- Administrative tooling for Falco☆122Updated this week
- Falco plugins SDK for Rust☆12Mar 2, 2026Updated 2 weeks ago
- Diagrams to visually learn Falco and its eBPF probe☆15Jun 24, 2021Updated 4 years ago
- Kubernetes Operator for Falco☆16Updated this week
- Falco rule repository☆157Mar 10, 2026Updated last week
- Cloud Native Runtime Security☆8,743Updated this week
- Fetches the metadata from kubernetes API server and dispatches them to Falco instances☆21Mar 10, 2026Updated last week
- Evolution process of The Falco Project☆60Updated this week
- Generate a variety of suspect actions that are detected by Falco rulesets☆117Feb 12, 2026Updated last month
- Falco plugins SDK for Go☆26Jan 29, 2026Updated last month
- Web-application used to validate Falco rules and test against scap file☆20Mar 18, 2025Updated last year
- eBPF-based Security Observability and Runtime Enforcement☆4,476Mar 14, 2026Updated last week
- A crawler for kernel releases distributed by the major Linux distributions.☆13Oct 18, 2024Updated last year
- BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for em…☆471Mar 11, 2026Updated last week
- Linux Kernel Runtime Integrity with eBPF☆184Nov 23, 2023Updated 2 years ago
- Vault Exploit Defense☆127Sep 7, 2024Updated last year
- Falco workflow & testing infrastructure☆33Updated this week
- Ansible playbooks to provision firecracker VMs and run Falco kernel tests☆14Mar 2, 2026Updated 2 weeks ago
- Scaffolding for BPF application development with libbpf and BPF CO-RE☆1,448Feb 27, 2026Updated 3 weeks ago
- ☆28Nov 24, 2021Updated 4 years ago
- Linux system exploration and troubleshooting tool with first class support for containers☆8,223Jan 29, 2026Updated last month
- Linux Runtime Security and Forensics using eBPF☆4,427Updated this week
- eBPF-based Cloud Native Monitoring Tool☆1,057Oct 25, 2024Updated last year
- A Linux Host-based Intrusion Detection System based on eBPF.☆458Dec 20, 2023Updated 2 years ago
- The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing…☆133Mar 6, 2026Updated 2 weeks ago
- ptrace-based event producer for udig☆67Jul 20, 2022Updated 3 years ago
- Automated upstream mirror for libbpf stand-alone build.☆2,656Updated this week
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆232Jun 2, 2024Updated last year
- Prometheus exporter for custom eBPF metrics☆2,532Updated this week
- bpflock - eBPF driven security for locking and auditing Linux machines☆151Feb 16, 2022Updated 4 years ago
- Get eBPF programs running from the cloud to the kernel in 1 line of bash☆1,296Apr 17, 2025Updated 11 months ago
- A golang ebpf libary based on cilium/ebpf and datadog/ebpf.☆348May 18, 2025Updated 10 months ago
- ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.☆7,587Mar 11, 2026Updated last week
- Source code of the official Falco website☆38Updated this week
- A Tool to make Build and Run eBPF programs easier☆858Mar 9, 2026Updated last week
- Example BPF program with LSM hooks☆36Feb 24, 2021Updated 5 years ago