eBPF: Block Linux Fileless Payload "Malware" Execution with BPF LSM
Blog post about how BPF can help detection and blocking fileless malware.
- from
- eBPF
- added
- 2026-10-10
- likes
- 0
similar
-
Bad BPF github.com
A collection of malicious eBPF programs that make use of eBPF's ability to read and write user data in between the usermode program and the kernel.
-
eBPF - Rethinking the Linux Kernel docs.google.com
eBPF JavaScript-like capabilities to the Linux Kernel.
-
bpfd github.com
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
-
-
bpflock - Lock Linux machines github.com
An eBPF driven security tool for locking and auditing Linux machines.
-
eBPF: “Blog post about how BPF can help detection and blocking fileless malware.”