Sysmon for Linux

—

Microsoft's Sysmon, on Linux.

CMIT

eBPF-based Linux port of Sysmon. Generates rich, structured telemetry of process creation, network events and file activity.

Does

For