vmware-archive / cbsensor-linux-bpfLinks
Linux endpoint events for BPF enabled systems
☆24Updated 2 years ago
Alternatives and similar repositories for cbsensor-linux-bpf
Users that are interested in cbsensor-linux-bpf are comparing it to the libraries listed below
Sorting:
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆117Updated 2 years ago
- Linux Kernel module for Carbon Black EDR☆12Updated 4 years ago
- Linux Kernel Runtime Integrity with eBPF☆183Updated last year
- Red Canary's eBPF Sensor☆109Updated 3 months ago
- eBPF - extended Berkeley Packet Filter tooling☆124Updated 3 years ago
- ☆89Updated last year
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆138Updated 2 years ago
- Whitelisting LD_PRELOAD libraries using LD_AUDIT☆63Updated 3 years ago
- Vault Exploit Defense☆128Updated last year
- Trace deep kernel events through eBPF and lsm hooks☆39Updated 4 years ago
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆85Updated 2 years ago
- Capsule8: open-source cloud-native behavioral security monitoring☆33Updated 7 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆150Updated 3 years ago
- egrets monitors egress☆46Updated 5 years ago
- ☆246Updated 4 years ago
- CITL's static analysis engine for native code artifacts☆20Updated 4 years ago
- Community-based integrated malware identification system☆82Updated 2 years ago
- Dectect syscall hooking using eBPF☆162Updated 2 years ago
- An eBPF playground☆207Updated last year
- Ccollection of Linux loadable kernel modules aimed to logs any user action☆26Updated 6 years ago
- Tool to examine the behaviour of setuid binaries under constrained limits.☆61Updated 4 years ago
- export mitmproxy traffic to PCAP file☆57Updated last year
- pyGoRE - Python library for analyzing Go binaries☆65Updated 3 years ago
- Golang command line tool for the macOS Endpoint Security Framework☆29Updated 5 years ago
- Automatically generate AV byte signatures from sets of similar binaries.☆279Updated 9 months ago
- Provide a shell like interface by utilizing osquery's distributed API☆81Updated 5 years ago
- Disabling kernel lockdown on Ubuntu without physical access☆79Updated 2 years ago
- python based memory injection/introspection/etc☆47Updated 2 years ago