Wajih Ul Hassan
Wajih Ul Hassan
You mean you can only run in parallel on a single machine but you cannot run in the cluster environment (on multiple machines). If that is the case, you can...
@julienmarie Can you try the `pi` example with Julia version `0.5` rather than `0.4`. HPAT has recently been updated to support Julia 0.5.
Thanks @anakorenko for the issue and for trying out Zeek Agent. We are aware that Zeek Agent does not work with Zeek version 4 and currently, there is no plan...
Yes, we would be more than happy to accept the pull request.
This happens due to mismatching Broker/CAF version.
Can you elaborate more on this? Are there any benefits in terms of performance or event granularity when using BPF instead of using Linux auditd to collect the process events?
I really like this idea of tracing applications at function-level because I can see its use case during threat hunting and forensic investigations. I'd love to add this functionality into...
This is awesome! Thanks!
I have a question on adding CommunityID column in the `socket_events` table. Currently, zeek-agent uses `auditd` and `openbsm` to collect socket events on Linux and macOS, respectively. In both cases,...
Not sure if I follow. By "new tracers" you mean something other than Linux `auditd` such as custom Linux kernel module to intercept those syscalls. Because for example `accept` call...