The Attenuator acts as an intelligent filter that can analyze security events detected by Jibril and provide additional context.

Jibril eBPF and Security Discord Garnet Labs 🐈‍⬛

Jibril
MITRE
- Techniques
Knowledge
- eBPF
  - eBPF Helpers
    map_xxx_elem (v3.19)
    get_prandom_u32 (v4.1)
    get_smp_processor_id (v4.1)
Research
- Runtime Security
  - Valkyrie Response

Powered by GitBook

© 2025 • Jibril • by Garnet Labs

On this page

Linux Distributions
Virtual Environments
Cloud Providers
CI/CD plugins
Linux Requirements
Kubernetes Requirements

Jibril

Install and Run

Requirements

Supported Platforms & Requirements

Last updated 15 days ago

Linux Distributions

Virtual Environments

Cloud Providers

and many others (consult).

CI/CD plugins

Linux Requirements

Linux Kernel ≥ v6.2
x64 Linux OS with eBPF (most current distributions)
Root privileges with the following capabilities:
- CAP_BPF (or CAP_SYS_ADMIN if not available)
- CAP_PERFMON
- CAP_NET_ADMIN

Works with kernels ≥ v5.2 but currently being tested in v6.2 and higher only.

Kubernetes Requirements

Kubernetes cluster with version 1.16+
Command kubectl configured to communicate with your cluster