https://miscreants.github.io/blog.trailofbits.com/authors/alessandro-gario/Recent content in Alessandro Gario on The Trail of Bits BlogHugoen-usTue, 09 Nov 2021 00:00:00 -0500https://miscreants.github.io/blog.trailofbits.com/2021/11/09/all-your-tracing-are-belong-to-bpf/Tue, 09 Nov 2021 11:26:37 -0500https://miscreants.github.io/blog.trailofbits.com/2021/11/09/all-your-tracing-are-belong-to-bpf/Originally published August 11, 2021 TL;DR: These simpler, step-by-step methods equip you to apply BPF tracing technology to real-word problems—no specialized tools or libraries required. BPF, a tracing technology in the Linux kernel for network stack tracing, has become popular recently thanks to new extensions that enable novel use-cases […]https://miscreants.github.io/blog.trailofbits.com/2017/12/14/announcing-the-trail-of-bits-osquery-extension-repository/Thu, 14 Dec 2017 08:51:41 -0500https://miscreants.github.io/blog.trailofbits.com/2017/12/14/announcing-the-trail-of-bits-osquery-extension-repository/Today, we are releasing access to our maintained repository of osquery extensions. Our first extension takes advantage of the Duo Labs EFIgy API to determine if the EFI firmware on your Mac fleet is up to date. There are very few examples of publicly released osquery extensions. Very little documentation exists on the topic. This […]