[Intel]: https://blog.doyensec.com/2022/10/11/ebpf-bypass-security-monitoring.html

[timb-machine]

Area

Offensive techniques

Parent threat

Execution, Privilege Escalation, Defense Evasion

Finding

https://blog.doyensec.com/2022/10/11/ebpf-bypass-security-monitoring.html

Industry reference

uses:eBPF
attack:T1620:Reflective Code Loading

Malware reference

No response

Actor reference

No response

Component

Linux

Scenario

No response