The Linux port of the Sysinternals Sysmon tool.
☆288Oct 28, 2026Updated this week
Alternatives and similar repositories for SysinternalsEBPF
Users that are interested in SysinternalsEBPF are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sysmon for Linux☆2,177Updated this week
- The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.☆63Sep 14, 2026Updated last month
- A Linux version of the Procmon Sysinternals tool☆4,752Sep 14, 2026Updated last month
- eBPF implementation that runs on top of Windows☆3,581Updated this week
- A Linux version of the ProcDump Sysinternals tool☆3,087Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆127Jun 22, 2026Updated 4 months ago
- The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing…☆138Updated this week
- bpflock - eBPF driven security for locking and auditing Linux machines☆157Feb 16, 2022Updated 4 years ago
- Red Canary's eBPF Sensor☆117Jun 26, 2026Updated 4 months ago
- ☆15Apr 28, 2023Updated 3 years ago
- BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for em…☆490Aug 3, 2026Updated 2 months ago
- A repository of sysmon configuration modules☆3,179Oct 14, 2026Updated 2 weeks ago
- ☆90Dec 5, 2025Updated 10 months ago
- A Rust library for managing eBPF programs.☆123Feb 26, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ebpfkit is a rootkit powered by eBPF☆866Feb 28, 2023Updated 3 years ago
- An open source library for operating the Windows Overlay Filter driver.☆22Jan 16, 2019Updated 7 years ago
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 6 years ago
- TrustedSec Sysinternals Sysmon Community Guide☆1,447Jun 30, 2026Updated 4 months ago
- Linux Runtime Security and Forensics using eBPF☆4,661Oct 1, 2026Updated 3 weeks ago
- Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)☆309May 24, 2026Updated 5 months ago
- Example of building and running an eBPF program in Rust☆33Sep 27, 2018Updated 8 years ago
- Extract compressed memory pages from page-aligned data☆49Sep 25, 2018Updated 8 years ago
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Linux Kernel Runtime Integrity with eBPF☆186Nov 23, 2023Updated 2 years ago
- Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows☆12Oct 8, 2026Updated 3 weeks ago
- View ETW Provider manifest☆625Oct 17, 2026Updated last week
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆222Sep 17, 2019Updated 7 years ago
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,990Apr 7, 2024Updated 2 years ago
- Utilities for Sysmon☆1,669Apr 4, 2026Updated 6 months ago
- Elastic Security detection content for Endpoint☆1,507Updated this week
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆344Oct 12, 2026Updated 2 weeks ago
- An IDA processor for eBPF bytecode☆51Oct 13, 2021Updated 5 years ago
- OSSEM Detection Model☆182Oct 11, 2022Updated 4 years ago
- A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29☆711Jul 7, 2024Updated 2 years ago
- Dectect syscall hooking using eBPF☆170Apr 28, 2023Updated 3 years ago
- Web based user interface for OpenRelik☆13Jun 21, 2026Updated 4 months ago
- Transform Linux Audit logs for SIEM usage☆873Oct 19, 2026Updated last week