This project contains the source for the Carbon Black App Control product for Linux. The project provides events and access control decisions to userspace. There are several event reporting options and can go into a full audit mode.
Checkout the source README.
The app-control-event-kernel-module project team welcomes contributions from the community. Before you start working with app-control-event-kernel-module, please read our Developer Certificate of Origin. All contributions to this repository must be signed as described on that page. Your signature certifies that you wrote the patch or have the right to pass it on as an open-source patch. For more detailed information, refer to CONTRIBUTING.md.
See LICENSE