Releases · microsoft/ntosebpfext

This is the first pre-release version of the NTOS eBPF extension project. This includes test signed binaries for two eBPF extensions. These are
the process extension (ntosebpfext.sys) and net even extension (neteventebpfext.sys).

What's Changed

Fork of ebpf-for-windows stripped down to create ntosebpfext by @Alan-Jowett in #1
Bump external/ebpf-verifier from 1056586 to 800101d by @dependabot in #2
Update README files and code cleanup. by @Alan-Jowett in #3
Code cleanup by @Alan-Jowett in #5
Add tools and demo app by @Alan-Jowett in #6
Update README.md by @poornagmsft in #11
Update ntos_ebpf_ext.h by @poornagmsft in #12
Switch of ebpf-for-windows 0.15.1 by @Alan-Jowett in #20
Enable ntosebpfext workflows by @Alan-Jowett in #21
Fix repo reference by @Alan-Jowett in #22
Add test for process_monitor.exe tool by @Alan-Jowett in #23
Switch to 0.16.0 by @Alan-Jowett in #24
Add test for process_monitor.exe tool by @Alan-Jowett in #25
Refactor common code into libs\ebpf_ext by @Alan-Jowett in #26
Fix test failure due to empty line at start of process_monitor_output.txt by @Alan-Jowett in #40
Add exit codes to process destroy information by @Austin-Lamb in #36
Derive device name from PROVIDER_NAME by @Alan-Jowett in #27
Add process create and exit times by @Austin-Lamb in #47
Add new neteventebpfext eBPF extension for processing network events. by @gtrevi in #28
Enable building ntosepbfext in onebranch by @Alan-Jowett in #70
Fixup ntosebpfext.onebranch.sln by @Alan-Jowett in #71
Upgrade to eBPF core 0.17.0 by @Austin-Lamb in #74
Fix ODR violation by @Alan-Jowett in #75
Add support for very long command lines in ntosebpfext process data by @Austin-Lamb in #76
Change ntosebpfext command lines and image file names from UTF-8 to UTF-16 by @Austin-Lamb in #77
Adding build for NuGet package by @Austin-Lamb in #79
Switch to ebpf 0.18.0 and add supports_context_header by @Alan-Jowett in #91
add install script for netevetebpfext and ntosebpfext by @LakshK98 in #108
version 0.1.0 by @shankarseal in #111
remove ntosebpfext.onebranch.sln. by @shankarseal in #119