Results 10 comments of Wajih Ul Hassan

You mean you can only run in parallel on a single machine but you cannot run in the cluster environment (on multiple machines). If that is the case, you can...

@julienmarie Can you try the `pi` example with Julia version `0.5` rather than `0.4`. HPAT has recently been updated to support Julia 0.5.

Thanks @anakorenko for the issue and for trying out Zeek Agent. We are aware that Zeek Agent does not work with Zeek version 4 and currently, there is no plan...

Yes, we would be more than happy to accept the pull request.

This happens due to mismatching Broker/CAF version.

Can you elaborate more on this? Are there any benefits in terms of performance or event granularity when using BPF instead of using Linux auditd to collect the process events?

I really like this idea of tracing applications at function-level because I can see its use case during threat hunting and forensic investigations. I'd love to add this functionality into...

I have a question on adding CommunityID column in the `socket_events` table. Currently, zeek-agent uses `auditd` and `openbsm` to collect socket events on Linux and macOS, respectively. In both cases,...

Not sure if I follow. By "new tracers" you mean something other than Linux `auditd` such as custom Linux kernel module to intercept those syscalls. Because for example `accept` call...