Linux Runtime Security and Forensics using eBPF
aquasecurity/tracee is engineered as a server, cloud service, or developer package. It is primarily deployed via Docker containers or package managers rather than a single desktop executable.
Topic hubs, agent specifications, and quick tools