talus-monitor — PyPI installer for Talus
Talus is a kernel-level ransomware detection & response agent for Linux: eBPF tracepoints hook syscalls, a per-PID sliding window scores file-open behaviour, and the response layer can terminate the offending process the moment a verdict fires. Measured: ~280,000 events/s at ~7.6% CPU.
This PyPI package is an installer/runner for the official prebuilt binary (published on GitHub releases). It is pure Python, stdlib-only, and does not bundle the agent itself.
pip install talus-process-monitor
talus-monitor install # fetches the latest release binary (~1.7 MB)
sudo talus-monitor run monitor --diagnose # 5-second end-to-end self-check
sudo talus-monitor run monitor # observe mode
sudo talus-monitor run monitor --auto-kill # EDR mode (Enterprise license)
Prefer building from source?
git clone https://github.com/BartoszOsiej/talus-process-monitor.git
cd talus-process-monitor && ./build.sh
sudo ./target/release/process-monitor monitor
- Free agent, MIT: https://github.com/BartoszOsiej/talus-process-monitor
- Deployment & tuning playbook: https://bartoszosiej.github.io/talus-process-monitor/field-guide.html
- Comparison vs Falco/Wazuh/Tracee: https://bartoszosiej.github.io/talus-process-monitor/comparison.html
Requires Linux with BTF (CO-RE) support and root or CAP_BPF/CAP_SYS_ADMIN to load the eBPF program. The binary runs on x86_64 Linux.
1 maintainer
Release files for talus-process-monitor 0.8.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| talus_process_monitor-0.8.2.tar.gz | 3.7 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| talus_process_monitor-0.8.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 7.9 kB
Release files / talus_process_monitor-0.8.2.tar.gz
| Download URL | talus_process_monitor-0.8.2.tar.gz |
|---|---|
| Size | 3.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e79e18bbbc847de441e9a863fb14686a772fd55063615139e2fc8a04675f6ef8
|
|
BLAKE2b-256 checksum How to use checksums |
0143198ea966ce86390654296f37cee2f314004ad1af38533d38b8d0b152b4b4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
Release files / talus_process_monitor-0.8.2-py3-none-any.whl
| Download URL | talus_process_monitor-0.8.2-py3-none-any.whl |
|---|---|
| Size | 4.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d46f206ffba72e8c4f5b8ec5549d3e56904fd6ee0fc905af617446d2338d6fea
|
|
BLAKE2b-256 checksum How to use checksums |
76da7dd78d37d95c7b5ec556c6c53d4b562221d73d7fc7e01dc5b627ed4bd0b7
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
