3 ms·
there's an eBPF mode for linux which is safe(r) so windows can still be blamed for not providing a relatively safe way of doing this.
by arccy 2y ago
there's an eBPF mode for linux which is safe(r)
so windows can still be blamed for not providing a relatively safe way of doing this.
- noisem4ker 2y agoWindows supports eBPF too.
- vbezhenar 2y agohttps://access.redhat.com/solutions/7068083 https://access.redhat.com/solutions/7068083 Kernel panic observed after booting 5.14.0-427.13.1.el9_4.x86_64 by falcon-sensor process. eBPF program causes kernel panic on kernels 5.14.0-410+ . Apparently not safe enough for CrowdStrike.