From 63f04fc46cb1ebc8ab16b32801d61aafa4c6d805 Mon Sep 17 00:00:00 2001 From: Mutasem-mk4 <140179052+Mutasem-mk4@users.noreply.github.com> Date: Mon, 20 Apr 2026 03:50:51 +0300 Subject: [PATCH 01/19] =?UTF-8?q?style:=20add=20Arabic=20name=20(=D9=85?= =?UTF-8?q?=D8=B9=D8=AA=D8=B5=D9=85=20=D8=AE=D8=B1=D9=85=D8=A7)=20for=20ag?= =?UTF-8?q?gressive=20SEO?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a33b207..faa089c 100644 --- a/README.md +++ b/README.md @@ -267,7 +267,7 @@ See [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) for community participation guideli ## About the Author -**procscope** was developed by [Mutasem Kharma](https://github.com/Mutasem-mk4), a **Security Engineer** and **eBPF Specialist** focused on building high-performance, offensive and defensive security tools for the modern cloud-native landscape. Mutasem specializes in low-level system observation, automated vulnerability research, and autonomous security agents. +**procscope** was developed by [Mutasem Kharma (معتصم خرما)](https://github.com/Mutasem-mk4), a **Security Engineer** and **eBPF Specialist** focused on building high-performance, offensive and defensive security tools for the modern cloud-native landscape. Mutasem specializes in low-level system observation, automated vulnerability research, and autonomous security agents. --- From 4075545358469d8cba644169437ce0a379f6c027 Mon Sep 17 00:00:00 2001 From: Mutasem Kharma <140179052+Mutasem-mk4@users.noreply.github.com> Date: Wed, 22 Apr 2026 00:49:53 +0300 Subject: [PATCH 02/19] chore: update README.md for BlackArch onboarding --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index faa089c..6b17df5 100644 --- a/README.md +++ b/README.md @@ -11,6 +11,9 @@ Trace malware behavior, investigate suspicious binaries, and audit container wor Latest Release + + BlackArch Linux + Awesome Go @@ -82,7 +85,7 @@ procscope will detect missing capabilities at startup and provide actionable gui | GitHub releases | Available | | `go install` | Available | | Debian / Kali / Parrot packages | Packaging metadata maintained in-tree; not yet shipped by the distro | -| Arch / BlackArch package | `arch/PKGBUILD` maintained in-tree; not yet shipped by BlackArch | +| Arch / BlackArch package | Available in BlackArch | ## Installation From 4a08306b081c159b7df85124c5f27dd6b5ee989e Mon Sep 17 00:00:00 2001 From: Mutasem Kharma <140179052+Mutasem-mk4@users.noreply.github.com> Date: Wed, 22 Apr 2026 00:49:56 +0300 Subject: [PATCH 03/19] chore: update arch/PKGBUILD for BlackArch onboarding --- arch/PKGBUILD | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/arch/PKGBUILD b/arch/PKGBUILD index a472b3b..90b41e7 100644 --- a/arch/PKGBUILD +++ b/arch/PKGBUILD @@ -1,19 +1,17 @@ -# Maintainer: Mutasem-mk4 <140179052+Mutasem-mk4@users.noreply.github.com> +# This file is part of BlackArch Linux ( https://www.blackarch.org/ ). +# See COPYING for license details. + pkgname=procscope pkgver=1.1.0 pkgrel=1 pkgdesc='Process-scoped runtime investigation tool using eBPF' arch=('x86_64' 'aarch64') +groups=('blackarch' 'blackarch-defensive' 'blackarch-forensic') url='https://github.com/Mutasem-mk4/procscope' license=('MIT') -groups=('blackarch' 'blackarch-forensic' 'blackarch-scanner') -depends=() -makedepends=('go>=2:1.25') +makedepends=('go>=1.25') source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/v${pkgver}.tar.gz") -# The sha256sum below must be updated after cutting a GitHub release. -# Generate it with: curl -sL "$url/archive/v$pkgver.tar.gz" | sha256sum -# For local development builds: makepkg --skipchecksums -sha256sums=('7efcd3b031115637b2bac1c2243786e2f6430445743ff42c5b5f7f680fa3d624') +sha512sums=('f8483681b1f3b6349e65d668aec67ab02bb7a0dced4f86478280561f23cdffbf139d50ba275cbf1ce17062c045b2e944f674c5c108efa38d50e752cc2e5d48bd') build() { cd "${pkgname}-${pkgver}" @@ -24,13 +22,14 @@ build() { go build \ -ldflags "-s -w \ -X 'github.com/Mutasem-mk4/procscope/internal/version.Version=${pkgver}' \ - -X 'github.com/Mutasem-mk4/procscope/internal/version.Commit=${pkgrel}'" \ + -X 'github.com/Mutasem-mk4/procscope/internal/version.Commit=blackarch'" \ -o "${pkgname}" \ ./cmd/procscope } check() { cd "${pkgname}-${pkgver}" + go test -short ./internal/events/... ./internal/output/... ./internal/redact/... ./internal/version/... } @@ -48,5 +47,5 @@ package() { install -Dm644 "completions/${pkgname}.fish" \ "${pkgdir}/usr/share/fish/vendor_completions.d/${pkgname}.fish" - install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md" + install -Dm644 README.md -t "${pkgdir}/usr/share/doc/${pkgname}" } From c5e7e3da34b1c1f5748a552fb406875f3967ba12 Mon Sep 17 00:00:00 2001 From: Mutasem Kharma <140179052+Mutasem-mk4@users.noreply.github.com> Date: Wed, 22 Apr 2026 00:49:58 +0300 Subject: [PATCH 04/19] chore: update docs/index.html for BlackArch onboarding --- docs/index.html | 57 +++++++++++++++++++++++++++++++++++++++---------- 1 file changed, 46 insertions(+), 11 deletions(-) diff --git a/docs/index.html b/docs/index.html index 9c50c1f..d67042d 100644 --- a/docs/index.html +++ b/docs/index.html @@ -5,28 +5,58 @@ - procscope — Zero-Overhead eBPF Process Tracer for Linux | Mutasem Kharma - - - - - + procscope — Zero-Overhead eBPF Process Tracer for Linux | Mutasem Kharma (معتصم خرما) + + + + + + + + - - + + - + - + + @@ -194,7 +224,12 @@

K8s Aware