practically, sysdig is how something like carbonblack should be doing its monitoring on linux. so to more directly answer your question; sysdig is the linux eq

practically, sysdig is how something like carbonblack should be doing its monitoring on linux. so to more directly answer your question; sysdig is the linux equivalent of the kernel module (plus userland grabby bits) needed for the executive pointy-clicky dashboard.