EDR: What Determines Whether eBPF Will Be Utilized By The EDR Sensor To Collect Data?
search cancel

EDR: What Determines Whether eBPF Will Be Utilized By The EDR Sensor To Collect Data?

book

Article ID: 287268

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What determines whether eBPF will be utilized by the EDR sensor to collect data?

Environment

  • EDR Server: 7.0.1 and Higher
  • EDR Sensor: 6.2.2 and Higher
  • Linux: All Supported Versions

Resolution

The OS of the endpoint determines whether eBPF will be utilized by the EDR sensor to collect data.

Additional Information

Currently, supported Ubuntu and SUSE Linux OS's, in addition to CentOS/RHEL 8.x OS's, require the use of eBPF on the EDR sensor.