Blog

Linux security,
in plain terms.

Practical articles on runtime security, eBPF, ransomware detection and protecting production Linux infrastructure.

25 Mar 2026 eBPF

Most ransomware detection tools work by scanning files after the damage is done. eBPF lets you watch what processes are actually doing at kernel level, in real time. Here is how it works and why it matters for Linux servers.

Read article →