This is a proof-of-concept example of using eBPF to Monitor for changes to eBPF Maps from user and kernel programs. This was written to accompany the blog Mapping It Out: Analyzing the Security of ...

Dumper is a low-level utility. You may have to write a wrapper around it for the framework of your choice. You can grab the JavaScript snippet and the required global ...