Main Stage·43 min
PatH
PatH demonstrates utilizing extended Berkeley Packet Filters (eBPF) to create kernel rootkits without writing kernel modules, presenting defensive detection mechanisms.
ebpfrootkitlinux+2
1 talk in the archive.
Loading filters…
1–1 of 1 talk · loading…
Main Stage·43 min
PatH
PatH demonstrates utilizing extended Berkeley Packet Filters (eBPF) to create kernel rootkits without writing kernel modules, presenting defensive detection mechanisms.