redcanary-ebpf-sensor

Event collector

A collection of eBPF applications designed to gather system events for a Linux EDR solution

Red Canary's eBPF Sensor

GitHub

101 stars
24 watching
14 forks
Language: C
last commit: about 2 years ago
Linked from 1 awesome list

ebpfedr-solutionssensor

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
redcanaryco/ebpfmonTool for monitoring and inspecting eBPF programs on Linux systems85
redcanaryco/mac-monitorAn advanced system monitoring tool designed to collect and enrich system events for macOS security research and analysis.966
cloudflare/ebpf_exporterAn exporter for collecting custom eBPF metrics and OpenTelemetry traces from Linux kernel programs2,226
gui774ume/ebpfkit-monitorA tool designed to detect and protect against certain types of malicious eBPF bytecode125
olcf/greggdA daemon that compiles and runs eBPF programs in the kernel to collect data on system events6
vbpf/ebpf-samplesThis repository provides a collection of sample eBPF programs for analysis and testing purposes.90
fzakaria/ebpf-mpls-encap-decapDemonstrates packet encapsulation and decapsulation with MPLS labels using eBPF54
kindlingproject/kindlingAn eBPF-based monitoring tool for Kubernetes applications.1,132
eunomia-bpf/eunomia-bpfA toolchain to simplify building and running eBPF programs with CO-RE and WebAssembly support687
vbpf/ebpf-verifierA tool that verifies the correctness of eBPF programs using an abstract interpretation approach392
iovisor/ubpfAn eBPF VM that allows userspace execution of eBPF programs in a Linux kernel-independent way.841
iomartin/ubpfAn eBPF VM implementation in C0
qmonnet/rbpfAn eBPF program interpreter and JIT compiler written in Rust.952
aquasecurity/libbpfgoA Go library providing an interface to eBPF programs from userspace748
raystack/raccoonA high-throughput service for collecting and publishing event data in real-time from various sources using multiple network protocols.200