Linux security

LevelBlue has released owlSM, an open-source Linux security engine built on eBPF LSM technology. The engine provides kernel-level Sigma rule evaluation, prevention capabilities to block operations before execution, anti-tampering features, and rich security event monitoring. It was created to address limitations in existing tools like Tetragon and Falco, particularly around enforcement and advanced detection features such as regex matching and stateful detections.