Alternatives and similar repositories for osquery-toolchain:

Users that are interested in osquery-toolchain are comparing it to the libraries listed below

• linux-audit / audit-testsuite
  A simple, self-contained regression test suite for the Linux Kernel's audit subsystem
  ☆23Updated 8 months ago
• sophos / talpa
  Talpa Kernel file access interception modules
  ☆17Updated 2 years ago
• theopolis / build-anywhere
  Scripts for building compilers that run anywhere, which build things that run anywhere
  ☆91Updated 5 years ago
• fmadio / pcap_merge
  High performance time ordered PCAP merging utility
  ☆22Updated 2 years ago
• kernelslacker / x86info
  x86info : x86 processor register decoder.
  ☆42Updated 3 months ago
• hatching / tracy
  tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
  ☆33Updated last year
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆116Updated 2 years ago
• trailofbits / ebpf-common
  Various utilities useful for developers writing BPF tools
  ☆30Updated 2 years ago
• uNetworking / libEpollFuzzer
  Tool for findings bugs in epoll-based Linux servers
  ☆30Updated 4 years ago
• nccgroup / xendbg
  A feature-complete reference implementation of a modern Xen VMI debugger. ARCHIVED: Development continues at https://github.com/spencermi…
  ☆77Updated 4 years ago
• libyal / libvsgpt
  Library and tools to access the GUID Partition Table (GPT) volume system format
  ☆10Updated 8 months ago
• theopolis / subzero
  Firmware analysis gone wild.
  ☆42Updated 10 years ago
• anfractuosity / procmod
  Modifies running processes on Linux
  ☆25Updated 2 years ago
• taviso / iknowthis
  iknowthis Linux SystemCall Fuzzer
  ☆20Updated 6 years ago
• magoo / osquery-hids
  Launchd daemon that reports major OSX modifications through growl
  ☆16Updated 10 years ago
• juergh / lqs2mem
  Convert libvirt-QEMU-save (LQS) files to raw memory files
  ☆37Updated last year
• utoni / potd
  A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt an…
  ☆30Updated 4 years ago
• libyal / libqcow
  Library and tools to access the QEMU Copy-On-Write (QCOW) image format
  ☆57Updated 4 months ago
• DynamoRIO / drk
  Dynamic instrumentation of the Linux kernel
  ☆41Updated 10 years ago
• KVM-VMI / nitro
  ☆47Updated 6 years ago
• ktls / af_ktls-tool
  Linux Kernel TLS/DTLS Module Tool
  ☆20Updated 7 years ago
• cloudburst / landfill
  python library for dumping a linux process from memory
  ☆34Updated 14 years ago
• landlock-lsm / linux
  Linux kernel - See Landlock issues
  ☆40Updated 2 weeks ago
• microsoft / ipe
  IPE is a Linux Security Module (LSM), which allows for a configurable policy to enforce integrity requirements on the whole system. IPE b…
  ☆62Updated 2 weeks ago
• hugsy / codebro
  Web based code browser using clang to provide basic code analysis.
  ☆44Updated 7 years ago
• brainsmoke / ptrace-burrito
  a friendly wrapper around ptrace
  ☆131Updated 3 years ago
• emptymonkey / xorscura
  A tool / library for simplifying string obfuscation with xor.
  ☆22Updated 10 months ago
• hughsie / python-uswid
  A tiny tool for embedding CoSWID tags in EFI binaries
  ☆22Updated last month
• hrw / python-syscalls
  Python module to check for system call numbers
  ☆11Updated last year
• robertdavidgraham / dnsparse
  Parses DNS responses in a secure, rigorous manner
  ☆21Updated 4 years ago