How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
Get Started
Author Page

Itamar Maouda

Itamar was a Security Researcher at Aqua Nautilus research team. His main focus is researching malware and threats in cloud native environments.
Blog Posts by Itamar Maouda
Hunting Rootkits with eBPF: Detecting Linux Syscall Hooking Using Tracee
Today, cloud native platforms are increasingly using eBPF-based security technology. It enables the monitoring and analysis of applications’ runtime behavior by creating safe hooks for tracing internal functions and capturing important data for forensic purposes. Tracee is an open source runtime security and forensics tool for Linux that is powered by eBPF and is more …
Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo