Alternatives and similar repositories for bouheki

Users that are interested in bouheki are comparing it to the libraries listed below

• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆150Updated 3 years ago
• mrtc0 / kubectf
  Kubernetes CTF
  ☆43Updated last week
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆183Updated last year
• shamedgh / confine
  This tool set can generate SECCOMP profiles for Docker images. It mainly relies on static analysis, making its results more reliable than…
  ☆67Updated 3 years ago
• dylandreimerink / edb
  An eBPF program debugger
  ☆213Updated 3 years ago
• knqyf263 / go-rpmdb
  RPM DB bindings for go
  ☆68Updated 4 months ago
• takehaya / Sys-Ebpf
  Sys::Ebpf is a pure-perl library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.In other wor…
  ☆32Updated last year
• lumontec / lsmtrace
  Trace deep kernel events through eBPF and lsm hooks
  ☆39Updated 4 years ago
• mrtc0 / container-security-book
  ☆155Updated last week
• elastic / bpfcov
  Source-code based coverage for eBPF programs actually running in the Linux kernel
  ☆132Updated 7 months ago
• evdenis / lsm_bpf_check_argc0
  LSM BPF module to block pwnkit (CVE-2021-4034) like exploits
  ☆21Updated 3 years ago
• google / buzzer
  ☆465Updated 3 months ago
• quarkslab / peetch
  An eBPF playground
  ☆207Updated last year
• Gui774ume / fsprobe
  A file system events notifier based on eBPF
  ☆73Updated 2 years ago
• Gui774ume / network-security-probe
  A process level network security monitoring and enforcement project for Kubernetes, using eBPF
  ☆44Updated 5 years ago
• willfindlay / suidsnoop
  suidsnoop is a tool based on eBPF LSM programs that logs whenever a suid binary is executed and implements custom allow/deny lists.
  ☆16Updated 3 years ago
• aquasecurity / tracee-action
  Protect GitHub Actions with Tracee
  ☆82Updated 7 months ago
• k1LoW / trivy-db-to
  trivy-db-to is a tool for migrating/converting vulnerability information from Trivy DB to other datasource.
  ☆27Updated 10 months ago
• f110 / heimdallr
  Zero trust proxy for using in corporate
  ☆71Updated 7 months ago
• redcanaryco / ebpfmon
  ☆89Updated last year
• trailofbits / ebpf-verifier
  Harness for the Linux kernel eBPF verifier
  ☆33Updated 3 years ago
• yasukata / iip
  iip: an integratable TCP/IP stack
  ☆89Updated last month
• YutaroHayakawa / ipftrace2
  A packet oriented Linux kernel function call tracer
  ☆406Updated last year
• shfz / shfz
  TypeScript Scenario-Based Web Application Fuzzing Framework
  ☆64Updated 3 years ago
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆137Updated 2 years ago
• knqyf263 / CVE-2022-0847
  The Dirty Pipe Vulnerability
  ☆46Updated 3 years ago
• RIKEN-RCCS / MilvusVisor
  A thin-hypervisor that runs on aarch64 CPUs.
  ☆97Updated 3 weeks ago
• andrewstucki / bpf-lsm
  Example BPF program with LSM hooks
  ☆33Updated 4 years ago
• m-mizutani / octovy
  Trivy based vulnerability management service
  ☆55Updated 2 months ago
• willfindlay / bpfbox
  🐝 BPFBox 📦 Exploring process confinement in eBPF
  ☆105Updated last year