https://github.com/osquery/osquery logo
#ebpf
Title
# ebpf
b

b0l

07/30/2018, 5:59 PM
@maestretti why ebpf and not static tracepoints for execve?
m

maestretti

07/30/2018, 6:15 PM
Static tracepoint is def the right place to target, so is the question why eBPF instead of perf?