1 dépôt
Awesome GitHub RepositoriesSystem Call Attribute Filtering
Filtering kernel events based on specific syscall arguments, timestamps, and return codes.
Distinct from System Call Filter Analysis: Specifically covers using syscall attributes for security rule triggering, whereas System Call Filter Analysis focuses on parsing seccomp filter structures.
Explore 1 awesome GitHub repository matching security & cryptography · System Call Attribute Filtering. Refine with filters or upvote what's useful.
Awesome System Call Attribute Filtering GitHub Repositories
Trouvez les meilleurs dépôts grâce à l'IA.Nous recherchons les dépôts les plus pertinents grâce à l'IA.
- falcosecurity/falco
falcosecurity/falco
8,670Voir sur GitHubFalco is an eBPF runtime security monitor and cloud native detection engine that identifies abnormal behavior and security threats across hosts and containers. It functions as a Linux kernel event auditor, capturing system calls and kernel events in real-time to detect malicious activity. The system distinguishes itself through a rule-based threat detection model that evaluates system activity against a library of community-maintained rules and custom security definitions. It enriches raw kernel events with container and Kubernetes metadata to provide observability into isolated environments
Allows defining security alerts based on specific system call arguments, timestamps, and return codes.
C++cloud-nativecncfcncf-project
