Alternatives and similar repositories for capsule8

Users that are interested in capsule8 are comparing it to the libraries listed below

• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆135Updated 2 years ago
• aquasecurity / vuln-list-update
  ☆185Updated last week
• mole-ids / mole
  Yara powered NIDS with high speed packet capture powered by PF_RING
  ☆69Updated last year
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆182Updated last year
• sourque / louis
  Linux EDR written in Golang and based on eBPF.
  ☆244Updated 3 years ago
• Cisco-Talos / Re2Pcap
  ☆55Updated last year
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆117Updated 2 years ago
• vmware-archive / cbsensor-linux-bpf
  Linux endpoint events for BPF enabled systems
  ☆24Updated 2 years ago
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆150Updated 3 years ago
• ossec / ossec-rules
  A repository for OSSEC rules and decoders
  ☆54Updated 2 years ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆109Updated 2 months ago
• xfhg / intercept
  INTERCEPT / Policy as Code Auditing & Compliance
  ☆86Updated 3 months ago
• tdwyer / CVE-2020-8559
  This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability
  ☆54Updated 5 years ago
• sysflow-telemetry / sysflow
  SysFlow documentation and issues tracker
  ☆45Updated 11 months ago
• neko-neko / utmpdump
  utmp file dumper, written in golang. Output to json or tsv or csv.
  ☆33Updated last year
• pathtofile / bpf-pipesnoop
  Example program using eBPF to log data being based in using shell pipes
  ☆41Updated 4 years ago
• tenable / nasl
  A parser for NASL.
  ☆45Updated 2 years ago
• hardenedvault / ved
  Vault Exploit Defense
  ☆128Updated 11 months ago
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 5 years ago
• knqyf263 / dnspooq
  DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)
  ☆99Updated 4 years ago
• ggrandes-clones / pmon
  Copy: Linux process monitoring (exec, fork, exit, set*uid, set*gid)
  ☆31Updated 3 years ago
• Pray3r / cloud-native-security
  Resources for CloudNative security research
  ☆32Updated 4 years ago
• chriskaliX / Hades
  Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)
  ☆297Updated 9 months ago
• lumontec / lsmtrace
  Trace deep kernel events through eBPF and lsm hooks
  ☆37Updated 4 years ago
• danielsagi / kube-pod-escape
  Kubernetes POC for utilizing write mount to /var/log for getting a root on the host
  ☆97Updated 4 years ago
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆94Updated last year
• teler-sh / teler-resources
  teler Resource Collections
  ☆36Updated this week
• olbat / nvdcve
  NVD/CVE as JSON files
  ☆122Updated 2 weeks ago
• knqyf263 / remic
  Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependencies
  ☆23Updated 6 years ago
• airbus-cert / dirtypipe-ebpf_detection
  An eBPF detection program for CVE-2022-0847
  ☆28Updated 3 years ago