Tag

#detection

1 write-up filed under this tag.

2026-07-265 min

Writing an eBPF Rootkit, Then the Detector That Kills It

Building a userland-hiding eBPF implant with aya, then flipping sides to hunt it from the kernel. Red and blue in one write-up.