EDR: What Determines Whether eBPF Will Be Utilized By The EDR Sensor To Collect Data?
book
Article ID: 287268
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
What determines whether eBPF will be utilized by the EDR sensor to collect data?
Environment
- EDR Server: 7.0.1 and Higher
- EDR Sensor: 6.2.2 and Higher
- Linux: All Supported Versions
Resolution
The OS of the endpoint determines whether eBPF will be utilized by the EDR sensor to collect data.
Additional Information
Currently, supported Ubuntu and SUSE Linux OS's, in addition to CentOS/RHEL 8.x OS's, require the use of eBPF on the EDR sensor.
Feedback
thumb_up
Yes
thumb_down
No