For information.
https://www.hackeridiot.com/pamspy-credentials-dumper-for-linux-using-ebpf
Best regards. Tom