vmware-archive / cbsensor-linux-bpfLinks
Linux endpoint events for BPF enabled systems
☆24Updated 3 years ago
Alternatives and similar repositories for cbsensor-linux-bpf
Users that are interested in cbsensor-linux-bpf are comparing it to the libraries listed below
Sorting:
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆119Updated last month
- Linux Kernel Runtime Integrity with eBPF☆184Updated 2 years ago
- Red Canary's eBPF Sensor☆113Updated 7 months ago
- Linux Kernel module for Carbon Black EDR☆12Updated 5 years ago
- Whitelisting LD_PRELOAD libraries using LD_AUDIT☆63Updated 4 years ago
- eBPF - extended Berkeley Packet Filter tooling☆133Updated 3 years ago
- Trace deep kernel events through eBPF and lsm hooks☆42Updated 4 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆139Updated 2 years ago
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- ☆90Updated last month
- An eBPF playground☆210Updated 2 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Tool to examine the behaviour of setuid binaries under constrained limits.☆63Updated 4 years ago
- Vault Exploit Defense☆127Updated last year
- ☆247Updated 4 years ago
- egrets monitors egress☆46Updated 5 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆151Updated 3 years ago
- An extensively configurable tool providing a summary of the changes between two files or directories, ignoring all the fluff you don't ca…☆203Updated 3 years ago
- YARI is an interactive debugger for YARA Language.☆90Updated 4 months ago
- Capsule8: open-source cloud-native behavioral security monitoring☆33Updated 8 years ago
- Dectect syscall hooking using eBPF☆168Updated 2 years ago
- MSR Project Freta☆77Updated last year
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆85Updated 3 years ago
- Automatically generate AV byte signatures from sets of similar binaries.☆285Updated last year
- pyGoRE - Python library for analyzing Go binaries☆66Updated 3 years ago
- The Linux port of the Sysinternals Sysmon tool.☆281Updated 4 months ago
- eBPF based syscalls, files and network events tracing framework☆92Updated 5 years ago
- Get live information about applications that make network requests (based on eBPF)☆53Updated 4 months ago
- Provide a shell like interface by utilizing osquery's distributed API☆82Updated 5 years ago
- Symbol hash for ELF files☆113Updated 3 years ago