In Linux circles, eBPF has evolved into a powerful tool for running sandboxed userspace programs inside the kernel. Now, Microsoft is working on porting eBPF to Windows as well.