Hartwell-Labs/talus-process-monitor

eBPF Security Monitoring and Sandboxing Agent Based on Aya

SPiCa (System Process Integrity & Cross-view Analysis) is a high-performance, eBPF-based rootkit detection engine written in Rust, inspired by the hatsune miku song SPiCa

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

Linux Runtime Security and Forensics using eBPF

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

An eBPF runtime security agent

Sandfly Security Agentless Compromise and Intrusion Detection System For Linux

Generic ransomware detector

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small model, and contains attacks under a root-owned policy. Optional hub for fleets.