Source: procscope
Section: utils
Priority: optional
Maintainer: Mutasem Kharma <kharma.mutasem@gmail.com>
Build-Depends:
 debhelper-compat (= 13),
 golang-1.26-go (>= 1.26.8~),
 clang,
 llvm,
 libbpf-dev,
Rules-Requires-Root: no
Standards-Version: 4.7.0
Homepage: https://github.com/Mutasem-mk4/procscope
Vcs-Browser: https://github.com/Mutasem-mk4/procscope
Vcs-Git: https://github.com/Mutasem-mk4/procscope.git

Package: procscope
Architecture: amd64 arm64
Depends: ${shlibs:Depends}, ${misc:Depends}
Description: Process-scoped runtime investigation tool using eBPF
 procscope lets you launch a command under observation, or attach to an
 existing process, and observe its runtime behavior: process lifecycle,
 file activity, network connections, privilege transitions, namespace
 changes, and mount operations.
 .
 It produces live terminal output, JSONL event streams, evidence bundles,
 and Markdown investigation reports.
 .
 Designed for security research, malware triage, reverse engineering
 support, incident response, and deep debugging on Linux hosts.
 .
 Requires Linux kernel 5.8+ with BTF support.
