We implemented the rule engine in our eBPF-based security monitoring agent Bombini: https://github.com/bombinisecurity/bombiniRule evaluation is blazingly fast and works entirely in eBPF

[anfedotoff@infosec.exchange]

We implemented the rule engine in our eBPF-based security monitoring agent Bombini: https://github.com/bombinisecurity/bombini
Rule evaluation is blazingly fast and works entirely in eBPF!
Check out the docs: https://bombinisecurity.github.io/bombini/configuration/rules.html

Feel free to give us any feedback! Contributions are welcome!

#ebpf #kubernetes #security #cloudnative