I built an eBPF ransomware detector in Rust
rust
dev.to
I built an eBPF ransomware detector in Rust Kernel-level tracing, sliding-window alerts, and a cyberpunk TUI — in 1.7MB. Why? Ransomware detection typically requires expensive enterprise solutions. I wanted something that: Runs at the kernel level — catches file operations before they hit disk Works in real-time — no post-mortem analysis, immediate alerts Ships as a single binary — no agents, no daemons, no dependencies Is open source — auditable, free, and community