Now Shipping: CBFS Encrypt and PCAP Filter

Our latest update is now available, featuring the full release of powerful kernel-level development components for building secure storage and advanced network monitoring and filtering solutions:

CBFS Encrypt

CBFS Encrypt, an application development library that includes a kernel-mode driver, enables developers to enforce data protection policies directly at the filesystem level. Using a lightweight filter driver architecture, the library provides transparent, on-the-fly encryption and decryption to authorized processes, while preventing unauthorized processes from accessing sensitive data.

Developers can define encryption rules for specific directories or files and specify which processes are permitted to view decrypted data. Applications that are not explicitly trusted see only encrypted content, making it possible to protect sensitive information while maintaining normal workflows for approved software.

PCAP Filter

PCAP Filter is a kernel-driver-based library for user-mode development of advanced network filtering, monitoring, and packet analysis software. The toolkit captures and processes network traffic in real time, exposing packets through a simple API so applications can inspect, analyze, and filter network activity.

PCAP Filter supports industry-standard BPF filter expressions, such as those used by tools like Wireshark and tcpdump, providing a familiar and efficient way to capture relevant traffic. PCAP Filter also enables more fine-grained filtering by allowing applications to capture all packets and apply arbitrary, application-defined logic when inspecting headers, payloads, and other properties. This supports more precise and flexible implementations of network diagnostics, monitoring, and security tooling.