Record · corpus.blog/posts/01a07df1-b467-7101-8ee1-081d0d74022d

On Bypassing eBPF Security Monitoring

Doyensec Blog · published 10 October 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.doyensec.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 25
Words captured: 2,654

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://ebpf.io/

ebpf.io

https://www.youtube.com/watch?v=44nV6Mj11uw

youtube.com

https://docs.kernel.org/trace/kprobes.html

docs.kernel.org

https://www.kernel.org/doc/Documentation/trace/ftrace.txt

kernel.org

https://perf.wiki.kernel.org/index.php/Main_Page

perf.wiki.kernel.org

https://docs.kernel.org/trace/uprobetracer.html

docs.kernel.org

https://blog.cloudflare.com/how-to-drop-10-million-packets/

blog.cloudflare.com

https://dl.acm.org/doi/abs/10.1016/j.jnca.2021.103283

dl.acm.org

https://developers.redhat.com/articles/2021/12/16/secure-your-kubernetes-deployments-ebpf

developers.redhat.com

https://goteleport.com/

goteleport.com

BPF to transform SSH Sessions to Structured Event Read at the source ↗

goteleport.com

https://goteleport.com/resources/audits/teleport-features-security-audit-q4-2021/

goteleport.com

https://linux.die.net/man/8/auditd

linux.die.net

https://grugq.github.io/docs/ul_exec.txt

grugq.github.io

https://code.woboq.org/linux/linux/security/apparmor/include/audit.h.html

code.woboq.org

https://man7.org/linux/man-pages/man2/pidfd_getfd.2.html

man7.org

https://www.kernel.org/doc/Documentation/security/Yama.txt

kernel.org

https://github.com/TheZ3ro/fdstealer

github.com

https://github.com/tmux/tmux/wiki

github.com

https://www.kernel.org/doc/html/v4.19/userspace-api/seccomp_filter.html

kernel.org

https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt

kernel.org

https://github.com/iovisor/bcc

github.com

https://tmpout.sh/2/4.html

tmpout.sh

https://twitter.com/th3zer0

twitter.com

https://mobile.twitter.com/alessandrogario

mobile.twitter.com