vmware-archive / cbsensor-linux-kmodLinks
Linux Kernel module for Carbon Black EDR
☆12Updated 4 years ago
Alternatives and similar repositories for cbsensor-linux-kmod
Users that are interested in cbsensor-linux-kmod are comparing it to the libraries listed below
Sorting:
- Linux endpoint events for BPF enabled systems☆24Updated 2 years ago
- The Linux port of the Sysinternals Sysmon tool.☆277Updated last month
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆85Updated 2 years ago
- Red Canary's eBPF Sensor☆111Updated 4 months ago
- Parse YARA rules and operate over them more easily.☆192Updated 8 months ago
- ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.☆117Updated 2 years ago
- Suricata Verification Tests - Testing Suricata Output☆115Updated this week
- Linux Kernel Runtime Integrity with eBPF☆183Updated last year
- gyp: A pure Go YARA parser☆106Updated last year
- Automatically generate AV byte signatures from sets of similar binaries.☆282Updated 10 months ago
- eBPF - extended Berkeley Packet Filter tooling☆125Updated 3 years ago
- This is the Linux kernel module event collector for the Carbon Black Cloud.☆19Updated 2 years ago
- x86 emulation and shellcode detection☆154Updated last year
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆214Updated 6 years ago
- Security ML models encoded as Yara rules☆213Updated 2 years ago
- Symbol hash for ELF files☆111Updated 3 years ago
- Ixia ATI team open source or generally public material. Anything added here MUST be approved by Ixia Management.☆66Updated 6 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆137Updated 2 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- ☆97Updated 5 years ago
- Trigram database written in C++, suited for malware indexing☆126Updated last year
- Community modules for CAPE Sandbox☆104Updated last week
- ☆44Updated 7 years ago
- A wireshark/tshark plugin for the JA3 TLS Client Fingerprinting Algorithm☆60Updated 2 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- ☆60Updated 4 years ago
- simple YARA-based IOC scanner☆169Updated 2 weeks ago
- A tool for de-obfuscating PowerShell scripts☆71Updated 6 years ago
- Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality☆83Updated 2 years ago
- ETW Python Library☆291Updated 2 years ago