Comment Comment by pluto_modadic What's the performance hit for doing this? And, the rootkit question, how would eBPF notice you doing this? parent pluto_modadic 3 years ago