Ground-truth benchmark for process capture on Linux — an independent eBPF oracle scores tracers, audit pipelines, and agent recorders against what the kernel actually executed
linux benchmark kernel audit tracing syscalls ebpf observability bpf security-tools process-monitoring agent-auditing
-
Updated
Oct 20, 2026 - Python