Extended Berkeley Packet Filter (eBPF) represents one of Linux’s most powerful kernel technologies, enabling users to load sandboxed programs directly into the kernel.
BPFDoor and Symbiote: Advanced eBPF-Based Rootkits Target Linux Systems
Related articles