# Tracee

**Canonical:** https://apis.io/apis/aqua-security/tracee/  
**Provider:** Aqua Security — https://apis.io/providers/aqua-security/  
**Documentation:** https://aquasecurity.github.io/tracee/

Tracee is one of 8 APIs that [Aqua Security](https://apis.io/providers/aqua-security/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include eBPF, Runtime Security, Linux Security, Forensics, and Open-Source. The published artifact set on APIs.io includes API documentation and a GitHub repository.

Tracee is a runtime security and forensics tool for Linux that uses eBPF technology to trace system events and detect suspicious behavioral patterns.

## Machine-readable artifacts (2)

- **Documentation** — https://aquasecurity.github.io/tracee/
- **GitHubRepository** — https://github.com/aquasecurity/tracee

## Other Aqua Security APIs (7)

- [Trivy](https://apis.io/apis/aqua-security/trivy/)
- [Aqua Security Authentication API](https://apis.io/apis/aqua-security/aqua-security-authentication-api/)
- [Aqua Security Containers API](https://apis.io/apis/aqua-security/aqua-security-containers-api/)
- [Aqua Security Images API](https://apis.io/apis/aqua-security/aqua-security-images-api/)
- [Aqua Security Policies API](https://apis.io/apis/aqua-security/aqua-security-policies-api/)
- [Aqua Security Registries API](https://apis.io/apis/aqua-security/aqua-security-registries-api/)
- [Aqua Security Users API](https://apis.io/apis/aqua-security/aqua-security-users-api/)

## Tags

eBPF, Runtime Security, Linux Security, Forensics, Open-Source

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/aqua-security/tracee/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/aqua-security/.