vmware-archive / cbsensor-linux-bpfLinks
Linux endpoint events for BPF enabled systems
☆24Updated 2 years ago
Alternatives and similar repositories for cbsensor-linux-bpf
Users that are interested in cbsensor-linux-bpf are comparing it to the libraries listed below
Sorting:
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆117Updated 2 years ago
- Linux Kernel module for Carbon Black EDR☆12Updated 4 years ago
- eBPF - extended Berkeley Packet Filter tooling☆124Updated 3 years ago
- Red Canary's eBPF Sensor☆109Updated 2 months ago
- Linux Kernel Runtime Integrity with eBPF☆182Updated last year
- ☆89Updated last year
- Example program using eBPF to log data being based in using shell pipes☆41Updated 4 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆135Updated 2 years ago
- Whitelisting LD_PRELOAD libraries using LD_AUDIT☆63Updated 3 years ago
- Trace deep kernel events through eBPF and lsm hooks☆37Updated 4 years ago
- Vault Exploit Defense☆128Updated 11 months ago
- egrets monitors egress☆46Updated 5 years ago
- Capsule8: open-source cloud-native behavioral security monitoring☆33Updated 7 years ago
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆85Updated 2 years ago
- An eBPF playground☆207Updated last year
- bpflock - eBPF driven security for locking and auditing Linux machines☆149Updated 3 years ago
- Dectect syscall hooking using eBPF☆161Updated 2 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Example BPF program with LSM hooks☆33Updated 4 years ago
- An extensively configurable tool providing a summary of the changes between two files or directories, ignoring all the fluff you don't ca…☆201Updated 2 years ago
- Tool to examine the behaviour of setuid binaries under constrained limits.☆61Updated 4 years ago
- This tool gives you the Linux system call number (32bit and 64bit x86) for a system call name (e.g., read, write, ...).☆26Updated last year
- ☆246Updated 4 years ago
- pyGoRE - Python library for analyzing Go binaries☆64Updated 3 years ago
- Provide a shell like interface by utilizing osquery's distributed API☆81Updated 5 years ago
- MSR Project Freta☆77Updated last year
- (Linux Kernel) Stack Monitoring Tool☆46Updated 3 years ago
- An eBPF detection program for CVE-2022-0847☆28Updated 3 years ago
- Community-based integrated malware identification system☆82Updated 2 years ago
- gyp: A pure Go YARA parser☆106Updated last year