GitHub - microsoft/ebpf-for-windows: eBPF implementation that runs on top of Windows

The following diagram shows the basic architecture of this project and related components: As shown in the diagram, existing eBPF toolchains (clang, etc.) can be used to generate eBPF bytecode from source code in various languages. Bytecode can be consumed by any application, or via bpftool or the Netsh command line tool, which use a shared library that exposes Libbpf APIs, though this is still in

[matarillo]

CrowdStrikeインシデントで開発の優先度が上がるのかどうか。そもそもEDRをeBPF上に構築できるものか、その意味があるのかもよくわからんが。