Cloud Native Runtime Security

Falco configurations intended for testing with the CNCF Green Reviews Working Group

Falco rule repository

All-purpose test suite for Falco and its ecosystem

Falco rule repository

eBPF-based Security Observability and Runtime Enforcement

libsinsp, libscap, the kernel module driver, and the eBPF driver sources

Linux Kernel Runtime Integrity with eBPF

Cloud Native Runtime Security

A collection of projects demonstrating various commandline cloaking techniques on Linux

Falco workflow & testing infrastructure

libsinsp, libscap, the kernel module driver, and the eBPF driver sources

Main repository for Datadog Agent

A Course on Intermediate Level Linux Exploitation

Elastic Malware Benchmark for Empowering Researchers

Factor graphs and loopy belief propagation implemented in Python