procscope — Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead. · Sprache: C · Topics: bpf, cli, container-security, ebpf, forensics, golang · ⭐ 16 Stars