https://hackersonlineclub.com/tracee-linux-runtime-security-and-forensics-using-ebpf/
Tracee- Linux Runtime Security And Forensics Using eBPF