Skip to content

ravn is a Linux runtime security and observability agent built with AI and eBPF technology.

License

Notifications You must be signed in to change notification settings

guy-davidi/ravn

Repository files navigation

Daily CI Release RAVN Latest Release

🛡️ RAVN - Runtime Anomaly & Vulnerability Network

Real-time security monitoring with eBPF and AI threat detection

Quick Start

# Build
make all

# Start daemon (requires root)
sudo ./artifacts/ravn daemon

# Start dashboard
./artifacts/ravn cli

Requirements

  • Linux kernel 5.4+
  • Redis server
  • Build tools (gcc, clang, make)

Installation

# Install Redis
sudo apt install redis-server
sudo systemctl start redis-server

# Build RAVN
make all

Features

  • Real-time Monitoring: eBPF-based system call tracking
  • AI Threat Detection: Deep learning model with sliding window analysis
  • Professional Dashboard: TUI interface with live updates
  • High Performance: <10ms inference, 100+ events/second

Docker Package

RAVN is also available as a Docker container:

# Pull from GitHub Container Registry (private)
docker pull ghcr.io/guy-davidi/ravn:latest

# Run the container
docker run -d --privileged ghcr.io/guy-davidi/ravn:latest

Note: The package is private and requires authentication to access.

License

GPL License - see LICENSE file for details.

About

ravn is a Linux runtime security and observability agent built with AI and eBPF technology.

Resources

License

Stars

Watchers

Forks

Packages

No packages published