• 1st May 2026

Building a Mini EDR with eBPF 3: Reducing False Positives in SUSPICIOUS_CONNECT

Linux Kernel eBPF Build

Read more →

• 30th April 2026

Building a Mini EDR with eBPF 2: Improving File Access Detection

Linux Kernel eBPF Build

Read more →

• 29th April 2026

Building a Mini EDR with eBPF 1: MVP Design

Linux Kernel eBPF Build

Read more →

• 28th April 2026

Exploring the Security Boundaries of the Linux eBPF Verifier Through Experiments

Linux Kernel eBPF Analysis

Read more →

• 23rd April 2026

Why 12 eBPF Partial-Init Variants That Looked Equivalent Produced Different Verification Results

Linux Kernel eBPF Analysis

Read more →