Skip to content

Sysmon for Linux

Forensics & Incident Response

A Linux system‑monitoring tool that logs process activity, network connections, and file writes to help detect malicious behavior

C Latest 1.5.2 · 27d ago Security brief →

Features

  • Logs detailed process lifetime events
  • Captures network connection information
  • Records filesystem write operations
  • Provides a human‑readable log viewer (sysmonLogView)
  • Supports BTF for accurate kernel offset discovery

Recent releases

View all 3 releases →
1.5.1.0 Bug fix

Fixed clang optimizations causing eBPF verifier load errors.

Changelog

Changes:

  • Fix clang optimizations resulting in eBPF verifier load errors (#224)
1.5.0.0 New feature
Notable features
  • Add EBPF event (#221)
Changelog

Changes:

  • Add EBPF event (#221)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,107
Forks
213
Languages
C C++ Python

Install & Platforms

Platforms
linux

Beta — feedback welcome: [email protected]