Stefano Bonicatti

[Trail of Bits @trailofbits]

While we take great pride in the tools we develop, we also benefit from tools maintained outside of the company. In 2022, we had more than 400 pull requests merged into non-ToB repos. We thank the maintainers for innumerable hours spent on this work! https://t.co/sewVcs1Xsx

[Alessandro Gario @alessandrogario]

My last BPF article has a new home!

In case you missed it, it's a handy introduction on programmatically generating tracers at runtime using the LLVM libraries. Be sure to check out the companion code too: https://t.co/Ft5bBN0ckb

https://t.co/A51FPwQsBR

[Alessandro Gario @alessandrogario]

Here's a new ebpfpub example to trace bash events with #eBPF using C++ and the LLVM libraries: https://t.co/1epOzmf9fw

https://t.co/wHkrBQcj5p

[Alessandro Gario @alessandrogario]

Ever wanted to dynamically codegen and load your #bpf programs from C++ with nothing except #llvm?

Take a look at this example we have released!

https://t.co/ROzv0I526l

[Alessandro Gario @alessandrogario]

I've added a new execsnoop example to our #eBPF based function tracing library! 😀

https://t.co/tDgc8xXvRn

[Alessandro Gario @alessandrogario]

Inspired by the Linux version of #ProcMon, I wrote a new SocketMonitor example for the ebpfpub library from @trailofbits! You can find it here: https://t.co/XxJIIBvjYS

[Alessandro Gario @alessandrogario]

Syscall fault injection is a really cool testing technique, but doing it reliably is hard. BPF has got your back, thanks to the bpf_override_return() helper! Here's a small tool I developed to play with it: https://t.co/KL7LFlujM3

[Alessandro Gario @alessandrogario]

BPF provides powerful system tracing capability on Linux but it is difficult to integrate into your applications. Today I'm releasing a BPF library, ebpf-common, and a tracing library based on LLVM: https://t.co/XxJIIBvjYS

[Trail of Bits @trailofbits]

TSC Frequency For All: Better Profiling and Benchmarking https://t.co/1vbjbJS79m

[seph (Also @[email protected]) @twseph]

Slides from my talk about how we do cross platform packaging here at @Kolideco ! #querycon

https://t.co/ndQotAi8Kp

[Victor (groob) @wikiwalk]

Tired, but excited about all the awesome interactions @QueryConf this year. Thanks to @trailofbits, @Kolideco and @CarbonBlack_Inc, well done.

Biggest takeaway this year is that the @osquery community deeply cares about the privacy of users.

[Objective-See Foundation @objective_see]

@trailofbits generously supports the infosec community in many ways (https://t.co/mAIne2rUgp, hosting @QueryConf, etc) 🙌

We're stoked they've joined our "Friends of Objective-See" program & as an OBTS conference sponsor 🥳

Mahalo for your community commitment & involvement !😍

[Trail of Bits @trailofbits]

We are happy to announce the first two talks for @QueryConf, with many more on the way. First up, Stefano Bonicatti of @trailofbits will share our work and vision for osql, our fork of osquery https://t.co/gAFupC5nDr

[Trail of Bits @trailofbits]

Second, our own @alessandrogario will review the past and present state of Linux event monitoring with osquery, including a demonstration of our new eBPF backend.

[Trail of Bits @trailofbits]

Watch this space for more talks being announced on Monday, and register now to reserve your spot to attend @QueryConf: https://t.co/owUi4I7qtb

[Trail of Bits @trailofbits]

Based on popular demand, we have added Press Passes to @QueryConf! Please register via eventbrite for a free ticket to attend the conference. https://t.co/JsNPdMOcAm

[Trail of Bits @trailofbits]

Announcing the community-oriented osquery fork, osql https://t.co/U9XhanEHJf

[Trail of Bits @trailofbits]

Announcing QueryCon 2019 https://t.co/C0is9UB4iv

[Stefano Bonicatti @Smjert]

I can confirm! https://t.co/0m1ZPvWNQJ

[tERRORbane @Terrorbane_BNS]

Terrorbane is 100% bug free, trust the Dev! #indiedev #gamedev #terrorbane #bitninestudio #thedev #jrpg #parody #bugs #glitches #laughs #irony

[Trail of Bits @trailofbits]

Tracking a stolen code-signing certificate with osquery https://t.co/iLvT1BW025