Talks·26 min
Quentin Jerome
Introduces Kunai, an eBPF-based Linux monitoring tool for threat hunting, and explains how it was built.
threat-detectionlinuxkernel+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 343 talks in the archive.
1–2 of 2 talks / 3
Talks·26 min
Quentin Jerome
Introduces Kunai, an eBPF-based Linux monitoring tool for threat hunting, and explains how it was built.
Talks·27 min
Quentin Jerome
Walks through the latest updates to an EDR agent and manager, covering ETW support, per-rule actions and centralized configuration.