1 stars | 0 forks | Go
eBPF endpoint observer for Linux: exec, file & network events as JSONL for your SIEM
What it does
Open Workstation Observer (OWO) is a lightweight eBPF-based monitoring tool for Linux that tracks exec, file, and network events, outputting them as JSON for SIEM integration. This enhances visibility and security for Linux systems by providing detailed event logging.
Why it matters: Discover how OWO leverages eBPF for enhanced Linux endpoint visibility and security!
Want to create content about this repo? Use Nemati AI tools to generate articles, tutorials, and social posts.



