1 个仓库
Awesome GitHub RepositoriesSystem Call Attribute Filtering
Filtering kernel events based on specific syscall arguments, timestamps, and return codes.
Distinct from System Call Filter Analysis: Specifically covers using syscall attributes for security rule triggering, whereas System Call Filter Analysis focuses on parsing seccomp filter structures.
Explore 1 awesome GitHub repository matching security & cryptography · System Call Attribute Filtering. Refine with filters or upvote what's useful.
Awesome System Call Attribute Filtering GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- falcosecurity/falco
falcosecurity/falco
8,670在 GitHub 上查看Falco is an eBPF runtime security monitor and cloud native detection engine that identifies abnormal behavior and security threats across hosts and containers. It functions as a Linux kernel event auditor, capturing system calls and kernel events in real-time to detect malicious activity. The system distinguishes itself through a rule-based threat detection model that evaluates system activity against a library of community-maintained rules and custom security definitions. It enriches raw kernel events with container and Kubernetes metadata to provide observability into isolated environments
Allows defining security alerts based on specific system call arguments, timestamps, and return codes.
C++cloud-nativecncfcncf-project
