timb-machine / timb-machine/linux-malware
[Intel]: https://github.com/vbpf/ebpf-samples
Nobody has claimed this yet.
- Dominant language
- HTML
- Stars
- 1.2k
- Forks
- 95
- PR merge metrics
- No merged PRs in 30d
Description
Area
Offensive tools
Parent threat
Persistence, Defense Evasion
Finding
https://github.com/vbpf/ebpf-samples
Industry reference
attack:T1205.002:Socket Filters
attack:T1620:Reflective Code Loading
Malware reference
No response
Actor reference
No response
Component
No response
Scenario
No response
Scenario variation
Device application sandboxing
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the linked ebpf-samples repository and the issue's Area, Parent threat, Industry reference, and Scenario variation fields. Determine whether this finding belongs in the tracker and what project artifact should record it; done is a documented, agreed entry with the relevant references, but the issue does not name a file or test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux
- Domain
- security
- Issue type
- Documentation
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100