From f2cbdbcc138fbd775737e3e3710c1802bd898f83 Mon Sep 17 00:00:00 2001
From: BartoszOsiej <metaforicmail@proton.me>
Date: Mon, 21 Sep 2026 11:24:59 +0200
Subject: [PATCH] =?UTF-8?q?Add=20talus=20=E2=80=94=20eBPF=20runtime=20secu?=
 =?UTF-8?q?rity=20monitor=20(Rust)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 data/tools/talus.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 data/tools/talus.yml

diff --git a/data/tools/talus.yml b/data/tools/talus.yml
new file mode 100644
index 000000000..b6231588b
--- /dev/null
+++ b/data/tools/talus.yml
@@ -0,0 +1,15 @@
+name: talus
+categories:
+  - linter
+tags:
+  - rust
+  - security
+license: MIT
+types:
+  - cli
+source: "https://github.com/BartoszOsiej/talus-process-monitor"
+homepage: "https://bartoszosiej.github.io/talus-process-monitor/"
+description: >-
+  eBPF-based runtime security monitor for Linux (Rust/aya). Sliding-window
+  syscall heuristics detect ransomware behavior; optional automated SIGKILL
+  response. A live kernel-side detector rather than static analysis.