redcanaryco/redcanary-ebpf-sensor

Red Canary's eBPF Sensor

redcanary-ebpf-sensor's Issues

How to use this software?

I can successfully compile this software via docker compose. And got a list of share objects:

systracing2@ubuntu:~/redcanary-ebpf-sensor/build/x86_64$ ls -rlt total 308 drwxr-xr-x 2 root root 4096 Feb 7 23:23 wrapped -rw-r--r-- 1 root root 10320 Feb 7 23:23 wpm-events -rw-r--r-- 1 root root 9856 Feb 7 23:23 pam-events -rw-r--r-- 1 root root 185248 Feb 7 23:23 process-events -rw-r--r-- 1 root root 18456 Feb 7 23:23 network-events -rw-r--r-- 1 root root 13360 Feb 7 23:23 cred-events -rw-r--r-- 1 root root 59928 Feb 7 23:23 script-events

IIUC I need to create my main function to use these library since I didn't find main function. Thank you!