rabbitstack/fibratus
View on GitHub ↗ ★ 2,566 Go
Security sensor for realtime threat detection and protection
6 mentions on Hacker News by 5 people: 4 stories, 2 comments · first 2016-05-26 · latest 2022-11-30
20082026
-
https://github.com/rabbitstack/fibratus/blob/master/docs/kev... >"Canonical fields Each kernel event contains a series of canonical fields that describe the nature of the event such as its name, the process identifier that generated the…
comment by peter_d_sherman · 2020-12-06 · in A modern tool for the Windows kernel exploration and observability -
You can check the kcap layout diagram in the source code docs: https://github.com/rabbitstack/fibratus/blob/ee26bbc73999895...
comment by archrabbit · 2020-12-06 · in A modern tool for the Windows kernel exploration and observability