vmware-archive / cbsensor-linux-bpfLinks
Linux endpoint events for BPF enabled systems
☆24Updated 3 years ago
Alternatives and similar repositories for cbsensor-linux-bpf
Users that are interested in cbsensor-linux-bpf are comparing it to the libraries listed below
Sorting:
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆118Updated 3 weeks ago
- Linux Kernel module for Carbon Black EDR☆12Updated 5 years ago
- Linux Kernel Runtime Integrity with eBPF☆184Updated 2 years ago
- Red Canary's eBPF Sensor☆112Updated 7 months ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆139Updated 2 years ago
- eBPF - extended Berkeley Packet Filter tooling☆132Updated 3 years ago
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- Vault Exploit Defense☆127Updated last year
- Whitelisting LD_PRELOAD libraries using LD_AUDIT☆63Updated 4 years ago
- An eBPF playground☆210Updated 2 years ago
- ☆89Updated last month
- Capsule8: open-source cloud-native behavioral security monitoring☆33Updated 8 years ago
- Trace deep kernel events through eBPF and lsm hooks☆42Updated 4 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆85Updated 3 years ago
- ☆247Updated 4 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆151Updated 3 years ago
- The Linux port of the Sysinternals Sysmon tool.☆281Updated 3 months ago
- pyGoRE - Python library for analyzing Go binaries☆66Updated 3 years ago
- Automatically generate AV byte signatures from sets of similar binaries.☆285Updated last year
- Provide a shell like interface by utilizing osquery's distributed API☆82Updated 5 years ago
- MSR Project Freta☆77Updated last year
- An eBPF detection program for CVE-2022-0847☆28Updated 3 years ago
- VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF☆167Updated last year
- An extensively configurable tool providing a summary of the changes between two files or directories, ignoring all the fluff you don't ca…☆203Updated 3 years ago
- Golang command line tool for the macOS Endpoint Security Framework☆29Updated 6 years ago
- Qubes containerization on Windows☆130Updated 4 years ago
- egrets monitors egress☆46Updated 5 years ago
- A process level network security monitoring and enforcement project for Kubernetes, using eBPF☆44Updated 5 years ago
- Tool to examine the behaviour of setuid binaries under constrained limits.☆63Updated 4 years ago