archrabbit

9 ms·

1.
Beyond the Userspace Call Stack: Subsystem Context for Detection Engineering(fibratus.io)
1 points by archrabbit 2mo ago|0 comments
2.
Exposing Attack Behaviour in Realtime(fibratus.io)
2 points by archrabbit 5mo ago|0 comments
3.
When Dark Souls Meets Chopin(youtube.com)
2 points by archrabbit 3y ago|0 comments
4.
Fibratus: Open-source threat detection and prevention solution(github.com)
1 points by archrabbit 4y ago|0 comments
5.
Fibratus – a swiss army knife for security teams(fibratus.io)
1 points by archrabbit 5y ago|0 comments
6.
by archrabbit 6y ago
I've hopefully fixed the UI issues for now :)
7.
by archrabbit 6y ago
You can check the kcap layout diagram in the source code docs: https://github.com/rabbitstack/fibratus/blob/ee26bbc73999895...
8.
by archrabbit 6y ago
Could you share your impressions?
9.
by archrabbit 6y ago
Besides it is: - fully programmable and extensible with Python scripts - has out of the box alerting - support for capture files - highly customizable regarding transporting events to output sinks
10.
by archrabbit 6y ago
Author here. I'll make sure to address the UI issue soon.
11.
Fibratus – A modern tool for the Windows kernel exploration and observability(fibratus.io)
2 points by archrabbit 6y ago|0 comments
12.
How to instrument userspace processes with uprobes and eBPF(sematext.com)
2 points by archrabbit 7y ago|0 comments
13.
Oxdpus – attaching prebuilt XDP bytecode to network devices in Go
8 points by archrabbit 7y ago|1 comments
14.
Using EBPF from Go for Fun and Profit(sematext.com)
7 points by archrabbit 8y ago|0 comments
15.
by archrabbit 8y ago
One thing to note about railcar is that it completely lacks the network stack, but it will probably be my "starting point" if someday I decide to evolve `rabbitc` into something "more serious".
16.
Rabbitc – Micro-container runtime built in Rust(github.com)
110 points by archrabbit 8y ago|12 comments
17.
Linux Container Internals (II)(rabbitstack.github.io)
2 points by archrabbit 8y ago|0 comments
18.
by archrabbit 9y ago
Sure, there is definitely a lot of possible improvements for the code examples, like avoiding `clone` on a heap allocated strings, etc. I had some really odd issues when passing a statically allocated strings to the `libc` functions (the fu
19.
by archrabbit 9y ago
I probably could wrap in the `unsafe` block just the invocations to the system calls. I'm learning Rust and I wanted to give the post some freshness. There are already a plethora of examples in C.
20.
by archrabbit 9y ago
it's Rust. Btw, did you see erlang or clojure? ;p
21.
Linux Container Internals(rabbitstack.github.io)
235 points by archrabbit 9y ago|21 comments