Back to browse
GitHub Repository

Live audit log of every command, file, and network connection a Claude Code (or any matched) session makes, from the kernel.

14 starsC

Live audit log of every command, file, network connection by Claude

by r3tr0·Jun 9, 2026·4 points·0 comments

AI Analysis

●●SolidWizardryNiche Gem

Kernel-level eBPF filtering tracks AI agent process trees without strace noise.

Strengths
  • eBPF kernel filtering avoids the noise of system-wide strace.
  • Tracks entire process subtrees, not just single PIDs.
Weaknesses
  • Linux-only limits adoption.
  • Narrow scope to Claude Code sessions.
Target Audience

Developers using Claude Code, security teams auditing AI agents

Similar To

Tracee · Falco · strace

Similar Projects

AI/ML●●Solid

Axon – Agentic AI with mandatory user approval and audit logging

Agent approval gates and audit logs beat open-source alternatives, but multi-agent governance isn't novel.

Solve My ProblemBig Brain
NeuroVexon
125mo ago
Developer Tools●●Solid

A bunch of Apache2/MIT log generators

uvx one-liners for 10 log formats with Poisson-paced anomaly scenarios.

Solve My ProblemBig Brain
TheIronYuppie
411mo ago