kprobes template
eBPF program using kprobes to trace TCP events without run-time compilation dependencies
By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.
翻译 - 通过Kprobe技术,来自E_Bwill的基于开源主机的入侵检测系统(HIDS)。
Linux kernel rootkit using kprobes (From http://phrack.org/issues/67/6.html)
ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
Implementation of PCI drivers, kprobe, sysfs, devfs, sensor driver, miscdevices, synchronization
a hook for the sys_connect using kprobes
Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes
使用kprobe获取sys_execve参数