eBPF for Windows

by Microsoftv1.1.0

Last updated May 4, 2026

This project is a work-in-progress that allows existing eBPF toolchains and APIs familiar in the Linux ecosystem to be used on top of Windows. It takes existing eBPF projects as submodules and adds the layer in between to make them run on top of Windows.

Visit homepage

Install with winget

$ winget install --id Microsoft.eBPFforWindows --exact --version 1.1.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph — no manual repackaging, no chasing vendor sites.

See Pckgr's app library

Installers · v1.1.0

Architecture	Type	Scope	Install	Download
x64	zip	-		Direct
arm64	zip	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

No known CVEs for eBPF for Windows.

Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.

Related apps

16-Bit InstallShield Support PackageMicrosoft
Microsoft.16BitInstallShieldSupportv1.0.0.0
A 16-bit InstallShield support package for installing 32-bit applications
Windows Device Recovery ToolMicrosoft
Microsoft.WindowsDeviceRecoveryToolv3.17.0
Firmware and bootloader repair tool for Windows Phone devices, HoloLens, and HoloLens Clicker.
Microsoft Build of OpenJDK with Hotspot 21Microsoft
Microsoft.OpenJDK.21v21.0.11.10
The Microsoft Build of OpenJDK is a new no-cost long-term supported distribution and Microsoft's new way to collaborate and contribute to the Java ecosystem.
WinDbgMicrosoft
Microsoft.WinDbgv1.2603.20001.0
WinDbg is a debugger that can be used to analyze crash dumps, debug live user-mode and kernel-mode code, and examine CPU registers and memory.
Malicious Software Removal ToolMicrosoft
Microsoft.MaliciousSoftwareRemovalToolv5.139
Tool to manually run Windows' monthly update checks for malicious software.
Azure Functions Core ToolsMicrosoft
Microsoft.Azure.FunctionsCoreToolsv4.10.0
Command line tools for Azure Functions

More from Microsoft or browse ebpf-for-windows, ebpf-toolchains, ebpftoolchains.

Frequently asked questions

How do I install eBPF for Windows on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Microsoft.eBPFforWindows --exact --version 1.1.0. winget downloads the installer from Microsoft and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install eBPF for Windows silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id Microsoft.eBPFforWindows --exact 1.1.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall eBPF for Windows via winget?

Run: winget uninstall --id Microsoft.eBPFforWindows --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from eBPF for Windows's Apps & Features entry.

Is eBPF for Windows free?

eBPF for Windows is distributed under MIT. Refer to the publisher (https://github.com/microsoft/ebpf-for-windows) for the full license terms - Wingetly itself does not charge for installation.

Does eBPF for Windows work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls eBPF for Windows directly from the publisher.

How do I keep eBPF for Windows up to date?

Run winget upgrade --id Microsoft.eBPFforWindows --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of eBPF for Windows from microsoft/winget-pkgs.