Most Linux security tools do one of two things when an attacker gets in: log it, or kill it.
I'm building a third option. Contain it, and learn what it wanted.
Aegis-v2 is open source, runs on eBPF, and is out now in audit mode for Rocky Linux 10.
Most Linux security tools do one of two things when an attacker gets in: log it, or kill it.
I'm building a third option. Contain it, and learn what it wanted.
Aegis-v2 is open source, runs on eBPF, and is out now in audit mode for Rocky Linux 10.