talus-monitor — PyPI installer for Talus
Talus is a kernel-level ransomware detection & response agent for Linux: eBPF tracepoints hook syscalls, a per-PID sliding window scores file-open behaviour, and the response layer can terminate the offending process the moment a verdict fires. Measured: ~280,000 events/s at ~7.6% CPU.
This PyPI package is an installer/runner for the official prebuilt binary (published on GitHub releases). It is pure Python, stdlib-only, and does not bundle the agent itself.
pip install talus-process-monitor
talus-monitor install # fetches the latest release binary (~1.7 MB)
sudo talus-monitor run monitor --diagnose # 5-second end-to-end self-check
sudo talus-monitor run monitor # observe mode
sudo talus-monitor run monitor --auto-kill # EDR mode (Enterprise license)
Prefer building from source?
git clone https://github.com/BartoszOsiej/talus-process-monitor.git
cd talus-process-monitor && ./build.sh
sudo ./target/release/process-monitor monitor
- Free agent, MIT: https://github.com/BartoszOsiej/talus-process-monitor
- Deployment & tuning playbook: https://bartoszosiej.github.io/talus-process-monitor/field-guide.html
- Comparison vs Falco/Wazuh/Tracee: https://bartoszosiej.github.io/talus-process-monitor/comparison.html
Requires Linux with BTF (CO-RE) support and root or CAP_BPF/CAP_SYS_ADMIN to load the eBPF program. The binary runs on x86_64 Linux.
1 maintainer
Release files for talus-process-monitor 0.8.1.post1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| talus_process_monitor-0.8.1.post1.tar.gz | 3.7 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| talus_process_monitor-0.8.1.post1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 7.9 kB
Release files / talus_process_monitor-0.8.1.post1.tar.gz
| Download URL | talus_process_monitor-0.8.1.post1.tar.gz |
|---|---|
| Size | 3.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
29c2e25c4c04798d317ea1805c434ae28044dd1786a9cea549f4da621dc8747b
|
|
BLAKE2b-256 checksum How to use checksums |
d5c7837212619f308f08910feb5c83b9e85a5e2af863c85481ba53df7dafa027
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
Release files / talus_process_monitor-0.8.1.post1-py3-none-any.whl
| Download URL | talus_process_monitor-0.8.1.post1-py3-none-any.whl |
|---|---|
| Size | 4.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
db07a15df2e85f4077282ce4b00dfae4b503a212701fd8c8e303f7f5ce9a703a
|
|
BLAKE2b-256 checksum How to use checksums |
06cc0d927bac50f494680108cf4704b5d57af3ff6c52e0d0435f1739ccc9c524
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
