Pinned Loading

1. osquery/osquery osquery/osquery Public

   SQL powered operating system instrumentation, monitoring, and analytics.

   C++ 23.2k 2.6k

2. trailofbits/mquire trailofbits/mquire Public

   Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.

   Rust 136 6

3. trailofbits/ebpfpub trailofbits/ebpfpub Public

   ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.

   C++ 122 10

4. trailofbits/ebpfault trailofbits/ebpfault Public

   A BPF-based syscall fault injector

   C++ 109 11

5. trailofbits/ebpf-common trailofbits/ebpf-common Public

   Various utilities useful for developers writing BPF tools

   C++ 32 7

6. btfparse btfparse Public

   A rewrite of the C++ btfparse library (https://github.com/trailofbits/btfparse)

   Rust 7 1