Add different projects, links and a new section for security

zoidyzoidzoid / awesome-ebpf

A curated list of awesome projects related to eBPF.

Creative Commons Zero v1.0 Universal

4.3k stars 368 forks source link

Add different projects, links and a new section for security #62

Closed Karneades closed 2 years ago

Karneades commented 2 years ago

I started with a new list here https://github.com/Karneades/awesome-ebpf but found yours today. So I integrated missing links into your list now and will delete my own afterwards. The section security will focus on the security / malware aspects of eBPF.

If I should move the security tools added to the projects section to this new security section to better find them, just say it.

Karneades commented 2 years ago

Thanks for your review! Will work through all of your suggestions, which will improve all my additions and update this PR accordingly.

Karneades commented 2 years ago

I updated everything as suggested and make some comments above in @qmonnet comments. Furthermore, I addes some more links/tools.

Karneades commented 2 years ago

Thanks again for your suggestions.

Additions in summary

Add new section for eBPF in security.
Add Cloudflare's and Brendan Gregg's eBPF links to generic article section.
Add Cilium.io link in addition to the existing GitHub link for Cilium.
Add bpftrace cheat sheet.
Add different links related to security.
- Tools: Falco, Sysmon4Lnx, Tracee, eBPF4Win, Red Canary's eBPF sensor and bpflock.
- Offensive security: Embrace The Red blog series about how eBPF could be abused, post about malware blocking using BPF LSM and eBPF rootkit talks and the corresponding tools.

qmonnet commented 2 years ago

Merged, thanks again!