sysflow-telemetry / sysflowLinks
SysFlow documentation and issues tracker
☆46Updated 10 months ago
Alternatives and similar repositories for sysflow
Users that are interested in sysflow are comparing it to the libraries listed below
Sorting:
- Red Canary's eBPF Sensor☆109Updated 2 months ago
- Falco rule repository☆131Updated last month
- A process level network security monitoring and enforcement project for Kubernetes, using eBPF☆43Updated 5 years ago
- A repository to store Rad Fingerprinting data.☆24Updated last year
- Suricata Verification Tests - Testing Suricata Output☆112Updated this week
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆79Updated 2 months ago
- Understand OVAL results in a blink of an eye☆35Updated 3 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆85Updated this week
- Generate a variety of suspect actions that are detected by Falco rulesets☆106Updated 2 months ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogue…☆70Updated last week
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆71Updated 2 years ago
- Protect your Cloud Native Applications running on Kubernetes from malicious attacks with pre-registered source code, pre-registered runti…☆56Updated 8 months ago
- Kit for building Falco drivers: kernel modules or eBPF probes☆66Updated last week
- Osquery Resources☆61Updated 6 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆149Updated 3 years ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆83Updated 3 months ago
- Elastic's eBPF☆69Updated last week
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆83Updated last year
- Cisco Orbital - Osquery queries by Talos☆134Updated last year
- A repository for OSSEC rules and decoders☆54Updated 2 years ago
- Kubernetes offensive framework built in eBPF☆38Updated 2 years ago
- Links and resources for the O'Reilly Kubernetes Security book☆98Updated 4 years ago
- VulsRepo is visualized based on the json report output in vuls.☆35Updated 3 years ago
- ptrace-based event producer for udig☆67Updated 3 years ago
- egrets monitors egress☆46Updated 5 years ago
- VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities☆102Updated 10 months ago
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated 9 months ago
- Wazuh - Splunk App☆56Updated 11 months ago
- Decision trees generated via Graphviz to inform pragmatic threat modelling.☆11Updated 4 years ago