johnjohnsp1 / capsule8Links
Capsule8: open-source cloud-native behavioral security monitoring
☆33Updated 7 years ago
Alternatives and similar repositories for capsule8
Users that are interested in capsule8 are comparing it to the libraries listed below
Sorting:
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆133Updated 2 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆117Updated 2 years ago
- Linux endpoint events for BPF enabled systems☆24Updated 2 years ago
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- ☆55Updated last year
- Linux Kernel Runtime Integrity with eBPF☆180Updated last year
- Vault Exploit Defense☆128Updated 11 months ago
- Linux EDR written in Golang and based on eBPF.☆243Updated 3 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆149Updated 3 years ago
- ☆185Updated 2 weeks ago
- Red Canary's eBPF Sensor☆109Updated 2 months ago
- DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)☆99Updated 4 years ago
- eBPF - extended Berkeley Packet Filter tooling☆124Updated 3 years ago
- Get live information about applications that make network requests (based on eBPF)☆51Updated 6 months ago
- This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability☆54Updated 5 years ago
- NVD/CVE as JSON files☆121Updated this week
- Trace deep kernel events through eBPF and lsm hooks☆37Updated 4 years ago
- ☆38Updated last year
- Project containing several tools/ scripts to recover the OpenSSH session keys used to encrypt/ decrypt SSH traffic.☆91Updated last year
- A repository for OSSEC rules and decoders☆54Updated 2 years ago
- Vulnerability detection scripts for Red Hat Enterprise Linux☆19Updated 2 years ago
- CVE-2020-10749 PoC (Kubernetes MitM attacks via IPv6 rogue router advertisements)☆25Updated 5 years ago
- Resources for CloudNative security research☆32Updated 3 years ago
- SysFlow documentation and issues tracker☆46Updated 10 months ago
- Project to decrypt and parse SSH traffic☆66Updated 4 years ago
- eBPF programs without a libbcc dependency☆60Updated 2 years ago
- Next generation !☆68Updated 4 years ago
- Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)☆297Updated 8 months ago
- Access the process event connector in linux kernels from Python.☆27Updated 3 years ago