Catching ransomware with eBPF: tracing lessons
An analysis of building a Rust and eBPF-based ransomware detector, discussing execve and openat tracing challenges and false positives.
An analysis of building a Rust and eBPF-based ransomware detector, discussing execve and openat tracing challenges and false positives.