Guillaume Fournier

ebpfkit. ebpfkit is a rootkit powered by eBPF

krie. Linux Kernel Runtime Integrity with eBPF

ebpfkit-monitor. ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

fsprobe. A file system events notifier based on eBPF

ssh-probe. monitor and protect SSH sessions with eBPF

utrace. UTrace is a tracing utility that leverages eBPF to trace both user space and kernel space functions

network-security-probe. A process level network security monitoring and enforcement project for Kubernetes, using eBPF

etrace. ETrace is a syscall tracing utility powered by eBPF

unixdump. Small utility that leverages eBPF to dump the traffic of a unix domain socket

ebpf-samples. This repository contains basic eBPF programs that can be used to compare golang eBPF packages

tcprobe. eBPF powered utility that traces the Traffic Control subsystem of a Linux kernel

ebpf-offsets-generator. Some research around eBPF offsets pre-computing

nfprobe. Netfilter hooks tracing tool

will-power-up. A custom Trello Power-Up

eparser. Go

imds-tracker. An eBPF based tool to track IMDS requests

will-power-up-dev. This is the dev repo for https://github.com/Gui774ume/will-power-up

span-id-tracker. Python

netlink. Simple netlink library for go.

power-up-template. A static GitHub pages hosted sample Power-Up

datadog-agent. Main repository for Datadog Agent