Pulsar is a security tool for monitoring the activity of Linux devices at runtime, powered by eBPF. The Pulsar core modules use eBPF probes to collect events from the kernel in a safe and efficient way. Pulsar events can be categorized in the four main following areas: Processes: processes information, including file execution and file opening. File I/O: I/O operations on disk and memory. Network: