Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
b
b0l
04/06/2018, 6:35 PM
good to know. I asked because last year I wrote an HIDS for my company using eBPF extremely. But I don't have time anymore to maintain it.
👍 1
t
thor
04/06/2018, 7:13 PM
That would be freakin awesome.
b
b0l
04/06/2018, 9:01 PM
It is in Go and it has some performance issues, this is the main reason of the idea to integrate it in osquery.
3 Views
#general
Join Slack