johnjohnsp1 / capsule8
Capsule8: open-source cloud-native behavioral security monitoring
☆32Updated 7 years ago
Alternatives and similar repositories for capsule8
Users that are interested in capsule8 are comparing it to the libraries listed below
Sorting:
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆131Updated 2 years ago
- An eBPF detection program for CVE-2022-0847☆28Updated 2 years ago
- eBPF-based EDR for Linux☆17Updated 8 months ago
- CVE-2020-10749 PoC (Kubernetes MitM attacks via IPv6 rogue router advertisements)☆25Updated 4 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆147Updated 3 years ago
- Get live information about applications that make network requests (based on eBPF)☆49Updated 3 months ago
- Exploit for CVE-2021-25741 vulnerability☆28Updated 3 years ago
- goscanner is a tool for large-scale TLS and SSH scans☆31Updated 11 months ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆116Updated 2 years ago
- monitor and protect SSH sessions with eBPF☆69Updated 3 years ago
- teler Resource Collections☆36Updated this week
- Red Canary's eBPF Sensor☆106Updated this week
- Docker Secure Computing Profile Generator☆48Updated 3 years ago
- This tool have the power to hide any PID/directory in the Linux kernel☆27Updated 8 months ago
- This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability☆54Updated 4 years ago
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- A collection of projects demonstrating various commandline cloaking techniques on Linux☆57Updated 2 years ago
- Kubernetes POC for utilizing write mount to /var/log for getting a root on the host☆96Updated 4 years ago
- Proof of Concept exploit for Kubernetes CVE-2020-8559☆20Updated 4 years ago
- Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG App…☆63Updated last month
- Linux endpoint events for BPF enabled systems☆24Updated 2 years ago
- Trace deep kernel events through eBPF and lsm hooks☆35Updated 4 years ago
- ☆37Updated last year
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆50Updated 3 years ago
- Linux Kernel Runtime Integrity with eBPF☆175Updated last year
- A process level network security monitoring and enforcement project for Kubernetes, using eBPF☆43Updated 4 years ago
- Resources for CloudNative security research☆32Updated 3 years ago
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆49Updated 2 years ago
- Example BPF program with LSM hooks☆33Updated 4 years ago