tetragon

arm64/aarch64 port of V4bel/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page

Implementing a Zero Trust network and runtime security model on Kubernetes with Cilium, Tetragon, Hubble, and L7 policies, and eBPF-powered detection.

a gRPC client for tetragon

Run an LLM agent like a production workload — isolated, mediated, and fully accounted for.

Tetragon Playground

Intrusion detection via behavioural graphs — eBPF tracing on Kubernetes (Tetragon DaemonSet), syscalls turned into behavioural graphs, Python analysis engine, red-team scenarios for validation.

POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133

ArgoCD app-of-apps definitions for operators, security, observability, and AI workloads

A 2-dimensional geometric roguelike shooter about fighting polygons and circles.

Risk-tiered automated containment and rollback from breach detection to eBPF isolation.

Intent-aware runtime detection and adaptive containment for AI agents on Kubernetes using eBPF and Tetragon

Real-time Kubernetes security monitoring with Tetragon, Kyverno, Prometheus & Grafana

This game was heavily inspired by "n-gon", by Ross Landgreen. (

Causal Validation Module for Cilium Tetragon. Anchors kernel-level process events to hardware-verified intent via eBPF/LSM hooks.

K8s security detection pipeline: Falco · Tetragon · Fluent Bit · Sigma · Elastic SIEM

Sock Shop microservices deployed on AWS EKS. Terraform infrastructure, Kubernetes manifests, and Tetragon runtime security.

🔥 Scorching AIOps — Autonomous AI-powered Kubernetes incident management with eBPF, causal graphs, and LLM agents

Verifiable defense-in-depth Kubernetes security + a self-grading re-implementation track (Cedar authz, Cilium L3/L7, Tetragon eBPF, SPIFFE) — a Korea FSC-MLS compensating-controls learning lab. Korean.