eBPF

• 1st May 2026

Building a Mini EDR with eBPF 3: Reducing False Positives in SUSPICIOUS_CONNECT

Linux Kernel eBPF Build

Read more →

• 1st May 2026

eBPF Guard

Linux Kernel eBPF Build

Building a Mini EDR with eBPF

Read more →

• 30th April 2026

Building a Mini EDR with eBPF 2: Improving File Access Detection

Linux Kernel eBPF Build

Read more →

• 29th April 2026

Building a Mini EDR with eBPF 1: MVP Design

Linux Kernel eBPF Build

Read more →

• 28th April 2026

Exploring the Security Boundaries of the Linux eBPF Verifier Through Experiments

Linux Kernel eBPF Analysis

Read more →

• 23rd April 2026

Why 12 eBPF Partial-Init Variants That Looked Equivalent Produced Different Verification Results

Linux Kernel eBPF Analysis

Read more →

• 21st April 2026

[Linux Kernel eBPF] Validating a BPF Trampoline UAF False Positive

Linux Kernel eBPF Analysis

Read more →

• 15th April 2026

[Linux Kernel eBPF] Finding bugs with an LLM - 1

Linux kernel eBPF bug

Read more →

• 14th April 2026

[Linux Kernel eBPF] Analyzing bpf selftests pkt_access.c

Linux kernel eBPF Analysis

Read more →

• 9th April 2026

[Linux Kernel eBPF] Analyzing Negative Index Handling in BPF CO-RE

Linux kernel eBPF Analysis

Read more →