Extended Berkeley Packet Filter; a technology for running sandboxed programs in the OS kernel to monitor system behavior.