5 ms·
Syscalls and kernel module loading can both be logged, I assume that's sufficient here.
by staticassertion 4mo ago
Syscalls and kernel module loading can both be logged, I assume that's sufficient here.
- skinfaxi 4mo agoYes but I am interested in hearing about cloudflare's implementation, how they scale it to their whole fleet, and what kinds of heuristics they are using to classifying behavior as anomalous.