All the articles with the tag "eBPF".
Building a high-performance ransomware detector by tracing kernel file operations with eBPF and dropping processes before encryption happens.