talus-monitor — PyPI installer for Talus
Talus is a kernel-level ransomware detection & response agent for Linux: eBPF tracepoints hook syscalls, a per-PID sliding window scores file-open behaviour, and the response layer can terminate the offending process the moment a verdict fires. Measured: ~280,000 events/s at ~7.6% CPU.
This PyPI package is an installer/runner for the official prebuilt binary (published on GitHub releases). It is pure Python, stdlib-only, and does not bundle the agent itself.
pip install talus-process-monitor
talus-monitor install # fetches the latest release binary (~1.7 MB)
sudo talus-monitor run monitor --diagnose # 5-second end-to-end self-check
sudo talus-monitor run monitor # observe mode
sudo talus-monitor run monitor --auto-kill # EDR mode (Enterprise license)
Prefer building from source?
git clone https://github.com/BartoszOsiej/talus-process-monitor.git
cd talus-process-monitor && ./build.sh
sudo ./target/release/process-monitor monitor
- Free agent, MIT: https://github.com/BartoszOsiej/talus-process-monitor
- Deployment & tuning playbook: https://bartoszosiej.github.io/talus-process-monitor/field-guide.html
- Comparison vs Falco/Wazuh/Tracee: https://bartoszosiej.github.io/talus-process-monitor/comparison.html
Requires Linux with BTF (CO-RE) support and root or CAP_BPF/CAP_SYS_ADMIN to load the eBPF program. The binary runs on x86_64 Linux.
1 maintainer
Release files for talus-process-monitor 0.8.1.post2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| talus_process_monitor-0.8.1.post2.tar.gz | 3.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| talus_process_monitor-0.8.1.post2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 8.0 kB
Release files / talus_process_monitor-0.8.1.post2.tar.gz
| Download URL | talus_process_monitor-0.8.1.post2.tar.gz |
|---|---|
| Size | 3.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7f744630f0fa44694542905938446f2cab5e2d419d65f9549fa9dfcb625a1600
|
|
BLAKE2b-256 checksum How to use checksums |
89da6c0854dec37029cb37689bb8b608506bfcc27b318355d912bfd6cfd05c95
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
Release files / talus_process_monitor-0.8.1.post2-py3-none-any.whl
| Download URL | talus_process_monitor-0.8.1.post2-py3-none-any.whl |
|---|---|
| Size | 4.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ef0b8b0779a285b67d64d7d85c7cbf898bc62e5c5f2540bc67eeac4f193a26a0
|
|
BLAKE2b-256 checksum How to use checksums |
08b566feab2d6b0699dd6f598689cc546db357fbc11532915da5f33f0f2ebe79
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
