Announcing Fox Ear 0.1.0
Hello, friends in the Rust community. I am so delighted to announce the 0.1.0 version of Fox Ear became available on GitHub.
Fox Ear is a process behavior trace tool in Linux based on eBPF. It consists of Rust, C, and a little bit Python. You can use Fox Ear to log the following behaviors of a process and its all subprocesses:
- Process creation
- File access
- TCP connection creation
Fox Ear uses the CSV format to store logs. So you can easily use that log in other ways. I hope this project could help debug and security analysis. I highly recommend you to check the example document to understand how to use Fox Ear.
Any advice and questions are appreciated.
GitHub: https://github.com/KernelErr/foxear
Example: https://github.com/KernelErr/foxear/blob/main/docs/example.md
