COPYCAT

Summary from the TLDR InfoSec newsletter

Copycat is a library that helps intercept system calls in a more efficient way on Linux systems 5.9 or higher. It offers faster performance compared to traditional ptrace-based methods by utilizing the SECCOMP Notifier API. Users can set rules for intercepting system calls by defining source and destination mappings either through environment variables or a configuration file.