sysflow-telemetry / sf-processorLinks
SysFlow edge processing pipeline
☆17Updated 10 months ago
Alternatives and similar repositories for sf-processor
Users that are interested in sf-processor are comparing it to the libraries listed below
Sorting:
- SysFlow collection probe☆16Updated 3 weeks ago
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆135Updated 9 months ago
- Generate a variety of suspect actions that are detected by Falco rulesets☆111Updated 6 months ago
- Falco rule repository☆145Updated last week
- ebpH (Extended BPF Process Homeostasis) monitors process behavior on your system to establish normal behavioral patterns. ebpH reports an…☆42Updated 2 years ago
- Elastic's eBPF☆70Updated 2 months ago
- 🐝 BPFBox 📦 Exploring process confinement in eBPF☆105Updated last year
- Kit for building Falco drivers: kernel modules or eBPF probes☆67Updated last week
- Process behaviour anomaly detection using eBPF and unsupervised-learning Autoencoders☆134Updated 3 years ago
- Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG App…☆70Updated 7 months ago
- A process level network security monitoring and enforcement project for Kubernetes, using eBPF☆44Updated 5 years ago
- SysFlow documentation and issues tracker☆46Updated last year
- 🐝 Ransomware Detection using Machine Learning with eBPF for Linux.☆69Updated last year
- bpflock - eBPF driven security for locking and auditing Linux machines☆150Updated 3 years ago
- libsinsp, libscap, the kernel module driver, and the eBPF driver sources☆292Updated this week
- OpenVEX Specification☆162Updated 5 months ago
- Red Canary's eBPF Sensor☆111Updated 5 months ago
- ☆251Updated last week
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆232Updated last year
- OCI hook to trace syscalls and generate a seccomp profile☆338Updated 3 weeks ago
- eBPF based syscalls, files and network events tracing framework☆92Updated 5 years ago
- Falco plugins registry☆108Updated this week
- agent for handling seccomp descriptors for container runtimes☆47Updated last year
- ptrace-based event producer for udig☆67Updated 3 years ago
- ☆16Updated last year
- Visualizer for GUAC☆28Updated 2 weeks ago
- A reading list for software supply-chain security.☆366Updated 3 years ago
- Intent driven security automation framework☆26Updated 3 months ago
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆21Updated 3 years ago
- Automated testing, generation & manipulation of #osquery packs☆73Updated last year