Back to browse
GitHub Repository

Live audit log of every command, file, and network connection a Claude Code (or any matched) session makes, from the kernel.

0 starsC

Live audit log of every command, file, network connection by Claude

by r3tr0·Jun 9, 2026·3 points·0 comments

AI Analysis

●●SolidWizardryNiche Gem

Kernel-level eBPF filtering tracks AI agent process trees without strace noise.

Strengths
  • eBPF kernel filtering avoids the noise of system-wide strace.
  • Tracks entire process subtrees, not just single PIDs.
Weaknesses
  • Linux-only limits adoption.
  • Narrow scope to Claude Code sessions.
Target Audience

Developers using Claude Code, security teams auditing AI agents

Similar To

Tracee · Falco · strace

Similar Projects

AI/ML●●Solid

Axon – Agentic AI with mandatory user approval and audit logging

Agent approval gates and audit logs beat open-source alternatives, but multi-agent governance isn't novel.

Solve My ProblemBig Brain
NeuroVexon
123mo ago
Security●●Solid

Poolnarc – catch hidden Linux cryptominers from two eBPF hooks

eBPF behavioral detection catches miners spoofing thread names without signature databases.

WizardryBig Brain
r3tr0
518d ago