Microsoft Ported Sysmon to Linux and Made it Open Source

Microsoft has ported the Sysmon activity monitoring service to the Linux platform. To monitor the work of Linux, the eBPF subsystem is used, which allows you to run handlers that work at the kernel level of the operating system. The SysinternalsEBPF library is being developed separately, which includes functions useful for creating BPF handlers for […]

The post Microsoft Ported Sysmon to Linux and Made it Open Source appeared first on Linux Today.