We implemented the rule engine in our eBPF-based security monitoring agent Bombini: https://github.com/bombinisecurity/bombini
Rule evaluation is blazingly fast and works entirely in eBPF!
Check out the docs: https://bombinisecurity.github.io/bombini/configuration/rules.html

Feel free to give us any feedback! Contributions are welcome!

#ebpf #kubernetes #security #cloudnative

Checkout new #casr 2.3.0 release!!!
https://github.com/ispras/casr
- rust panic support in casr-san/casr-gdb
- c++ exceptions support in casr-san/casr-gdb
- casr-python for creating CASR reports from python crashes🔥​

P. S. Merry Christmas! ❄️​❄️​❄️​
#fuzzing #afl #aflplusplus #python

At last, new casr 2.2.0 release with casr-afl!!!
Triaging crashes found by @aflplusplus as simple as it could be:
$ cargo install casr
$ casr-afl -i afl-out -o casr-out
$ casr-cli casr-out/cl1/<report_name>

https://github.com/ispras/casr

#casr #fuzzing #afl #AFLplusplus