Blackhat USA 2022: Return to Sender – Detecting Kernel Exploits with eBPF

Let’s take a brief look at what Guillaume Fournier from Datadog presented at Blackhat USA 2022: ”One of the fastest growing subsystems in the Linux Kernel is, without any doubt, eBPF (extended Berkeley Packet Filter).”