{"id":40828,"date":"2021-05-11T19:41:00","date_gmt":"2021-05-11T19:41:00","guid":{"rendered":"http:\/\/e79e1dc2-9c99-458f-9a51-e2b6bc4eff8c"},"modified":"2021-05-11T19:41:00","modified_gmt":"2021-05-11T19:41:00","slug":"porting-linuxs-ebpf-to-windows-10-and-windows-server","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/","title":{"rendered":"Porting Linux&#8217;s eBPF to Windows 10 and Windows Server"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/hub\/i\/r\/2020\/06\/05\/30d74ab5-e703-4b01-8dd1-e1895f627516\/thumbnail\/770x578\/4301d0a1280caf79f6257f80351b8ef1\/linux-penguin-in-windows-10-pc.png\" class=\"ff-og-image-inserted\"><\/div>\n<p>Can you run <a href=\"https:\/\/ebpf.io\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">eBPF<\/a> on Windows? Sure, if you&#8217;re using <a href=\"https:\/\/www.zdnet.com\/article\/linux-graphical-apps-coming-to-windows-subsystem-for-linux\/\" target=\"_blank\" rel=\"noopener noreferrer\">Windows Subsystem for Linux 2.0<\/a>. Of course, there you&#8217;re running it on the Linux kernel on Windows 10. But running eBPF on Windows natively? Nah. That will change soon, however. Microsoft has started <a href=\"https:\/\/cloudblogs.microsoft.com\/opensource\/2021\/05\/10\/making-ebpf-work-on-windows\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">an open-source project to make eBPF work on Windows 10<\/a> and Windows Server 2016 and later.&nbsp;<\/p>\n<p>This is the <a href=\"https:\/\/aka.ms\/ebpf-for-windows\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">ebpf-for-windows project<\/a>. With it, Windows developers can use eBPF toolchains and application programming interfaces (APIs) on top of existing versions of Windows. This won&#8217;t be easy. Still, by building on the work of others, it should be possible. This project takes several existing eBPF open-source projects and adds the &#8220;glue&#8221; to make them run on Windows.&nbsp;<\/p>\n<p>Why would you want to do this? Linux developers already know the answer to that, but Windows programmers probably don&#8217;t.&nbsp;<\/p>\n<p>Here&#8217;s the story.<\/p>\n<p>First, it all started with a firewall program: The decades-old <a href=\"http:\/\/www.tcpdump.org\/papers\/bpf-usenix93.pdf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Berkeley Packet Filter (BPF)<\/a>. This was designed for capturing and filtering network packets on a register-based virtual machine (VM). That was useful. But, as the years went by, Alexei Starovoitov, Linux kernel developer and Facebook software engineer, realized that updating BPF to work with modern processors, <a href=\"https:\/\/lwn.net\/Articles\/599755\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">extended BPF (eBPF)<\/a>, to run user-supplied programs inside of the kernel would make it far more powerful. It was introduced in the 3.15 Linux kernel and programmers quickly started using it for all kinds of programs.&nbsp;<\/p>\n<p>Today, eBPF remains very useful for network filtering, analysis, and management, but it has far more jobs. EBPF is also used for system call filtering and process context tracing. In short, it&#8217;s become a Swiss-army knife for programming tracing, system profiling, and collecting and aggregating low-level custom metrics. At a higher level, this means eBPF has become the foundation of security programs, such as <a href=\"https:\/\/cilium.io\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Cilium<\/a>, <a href=\"https:\/\/falco.org\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Falco<\/a>, and <a href=\"https:\/\/github.com\/aquasecurity\/tracee\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Tracee<\/a>;&nbsp;<a href=\"https:\/\/kubernetes.io\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Kubernetes<\/a> observation programs like <a href=\"https:\/\/github.com\/cilium\/hubble\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Hubble<\/a> and <a href=\"https:\/\/www.zdnet.com\/article\/new-relic-open-sources-pixie-its-kubernetes-native-in-cluster-observability-platform\/\">Pixie<\/a>, and, of course, toolchains such as <a href=\"https:\/\/clang.llvm.org\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Clang<\/a>.<\/p>\n<p>In Windows, here&#8217;s how it&#8217;s going to work: Existing eBPF toolchains will generate eBPF bytecode from source code in various languages. This bytecode can then be used by any application or manually through the Windows netsh command-line tool. This will be done using a shared library that exposes <a href=\"https:\/\/github.com\/libbpf\/libbpf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Libbpf APIs<\/a>. This is still a work in progress.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\"> <\/section>\n<p>The library will then send the eBPF bytecode to the <a href=\"https:\/\/github.com\/vbpf\/ebpf-verifier\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">PREVAIL static verifier<\/a>. This, in turn, is hosted in a user-mode <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/services\/protecting-anti-malware-services-#system-protected-process\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">protected process<\/a>, which is a Windows security environment that allows a kernel component to trust a user-mode daemon signed by a trusted key. If the bytecode passes all the verifier&#8217;s safety checks, the bytecode can be loaded either into the <a href=\"https:\/\/github.com\/iovisor\/ubpf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">uBPF<\/a> interpreter running in a Windows kernel-mode execution context or compiled by the <a href=\"https:\/\/github.com\/iovisor\/ubpf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">uBPF<\/a> just-in-time (JIT) compiler and have native code loaded into the kernel-mode execution context. The <a href=\"https:\/\/github.com\/iovisor\/ubpf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">uBPF step<\/a> is based on an Apache-licensed library for executing eBPF programs.<\/p>\n<p>Then, the eBPF programs running in the kernel-mode execution context will be attached to hooks that handle events and call helper APIs. These are exposed via the eBPF shim. This shim wraps public Windows kernel APIs. This enables eBPF to be used on Windows. So far, two hooks (XDP and socket bind) have been added. Other hooks, and not just network ones, will be added.<\/p>\n<p>This is in no way an eBPF fork. It&#8217;s just adding a Windows-specific hosting environment for eBPF.&nbsp;<\/p>\n<p>The name of the game is to enable Windows developers to use eBPF programs, which will be source code compatible across Windows and Linux. Some of this will be done by using the <a href=\"https:\/\/github.com\/libbpf\/libbpf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Libbpf APIs<\/a>&nbsp;<\/p>\n<p>Of course, some eBPF code is very specific to Linux &#8212; for example, if it uses Linux internal data structures. But many other APIs and hooks will work across platforms. EBPF, as advanced Linux programmers know, gives Linux developers a great deal of power. Now, this take on eBPF will share the wealth with Windows developers.<\/p>\n<p><strong>Related Stories:<\/strong><\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Linux circles, eBPF has evolved into a powerful tool for running sandboxed userspace programs inside the kernel. Now, Microsoft is working on porting eBPF to Windows as well.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":40829,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-40828","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Porting Linux&#039;s eBPF to Windows 10 and Windows Server 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Porting Linux&#039;s eBPF to Windows 10 and Windows Server 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-05-11T19:41:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"578\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Porting Linux&#8217;s eBPF to Windows 10 and Windows Server\",\"datePublished\":\"2021-05-11T19:41:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/\"},\"wordCount\":672,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/\",\"name\":\"Porting Linux's eBPF to Windows 10 and Windows Server 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png\",\"datePublished\":\"2021-05-11T19:41:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png\",\"width\":770,\"height\":578},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/porting-linuxs-ebpf-to-windows-10-and-windows-server\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Porting Linux&#8217;s eBPF to Windows 10 and Windows Server\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Porting Linux's eBPF to Windows 10 and Windows Server 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/","og_locale":"en_US","og_type":"article","og_title":"Porting Linux's eBPF to Windows 10 and Windows Server 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-05-11T19:41:00+00:00","og_image":[{"width":770,"height":578,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Porting Linux&#8217;s eBPF to Windows 10 and Windows Server","datePublished":"2021-05-11T19:41:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/"},"wordCount":672,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/","url":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/","name":"Porting Linux's eBPF to Windows 10 and Windows Server 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png","datePublished":"2021-05-11T19:41:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/porting-linuxs-ebpf-to-windows-10-and-windows-server.png","width":770,"height":578},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/porting-linuxs-ebpf-to-windows-10-and-windows-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Porting Linux&#8217;s eBPF to Windows 10 and Windows Server"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=40828"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40828\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/40829"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=40828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=40828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=40828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}