Microsoft tau xa Sysmon rau Linux thiab ua rau nws qhib qhov chaw

Microsoft tau xa cov kev pabcuam saib xyuas haujlwm hauv Sysmon system mus rau Linux platform. Txhawm rau saib xyuas kev ua haujlwm ntawm Linux, eBPF subsystem yog siv, uas tso cai rau koj los tsim cov neeg ua haujlwm khiav ntawm lub operating system kernel theem. Lub tsev qiv ntawv SysinternalsEBPF tab tom raug tsim los sib cais, suav nrog cov haujlwm tseem ceeb rau kev tsim BPF cov neeg saib xyuas kev saib xyuas cov xwm txheej hauv lub cev. Cov cuab yeej code yog qhib raws li daim ntawv tso cai MIT, thiab BPF cov kev pab cuam nyob rau hauv daim ntawv tso cai GPLv2. Cov pob khoom.microsoft.com repository muaj cov khoom npaj ua RPM thiab DEB cov pob khoom tsim nyog rau nrov Linux faib.

Sysmon tso cai rau koj khaws ib lub cav nrog cov ncauj lus kom ntxaws txog kev tsim thiab kev txiav tawm ntawm cov txheej txheem, kev sib txuas hauv network thiab cov ntaub ntawv siv. Cov ntaub ntawv khaws cia tsis yog tsuas yog cov ntaub ntawv dav dav xwb, tab sis kuj tseem muaj cov ntaub ntawv tseem ceeb rau kev txheeb xyuas qhov xwm txheej kev nyab xeeb, xws li lub npe ntawm cov txheej txheem niam txiv, hashs ntawm cov ntsiab lus ntawm cov ntaub ntawv ua tiav, cov ntaub ntawv hais txog cov tsev qiv ntawv dynamic, cov ntaub ntawv hais txog lub sijhawm tsim / nkag / hloov / tshem tawm cov ntaub ntawv, cov ntaub ntawv hais txog kev nkag ncaj qha ntawm cov txheej txheem los thaiv cov khoom siv. Txhawm rau txwv tus nqi ntawm cov ntaub ntawv kaw, nws tuaj yeem teeb tsa cov ntxaij lim dej. Lub cav tuaj yeem txuag tau ntawm tus qauv Syslog.

Tau qhov twg los: opennet.ru

Ntxiv ib saib