Tracee is a runtime security and observability tool that uses eBPF to monitor system and application behaviour. It exposes system activity as events and can detect suspicious behavioural patterns.
This is free and open source software.
Key Features
- Uses eBPF technology to observe Linux system activity.
- Provides runtime security and observability.
- Exposes system and application activity as consumable events.
- Detects suspicious behavioural patterns through security events.
- Runs on common Linux distributions and kernels.
- Can be deployed using Docker or Kubernetes.
Website: github.com/aquasecurity/tracee
Support:
Developer: Aqua Security
License: Apache License 2.0
Tracee is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| Host-Based Intrusion Detection Systems | |
|---|---|
| Wazuh | Platform used for threat prevention, detection, and response |
| OSSEC | Full platform to monitor and control your systems. |
| AIDE | Advanced Intrusion Detection Environment |
| Logwatch | Powerful and versatile log parser and analyzer |
| Samhain | File integrity checking and log file monitoring/analysis and more |
| Sagan | Multi-threads, high performance log analysis engine |
| Tripwire | Security and data integrity tool |
| rkhunter | Scans for rootkits, backdoors and possible local exploits |
| chkrootkit | Locally checks for signs of a rootkit |
Read our verdict in the software roundup.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |