EDR: What Determines Whether eBPF Will Be Utilized By The EDR Sensor To Collect Data?
Article ID: 287268
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
What determines whether eBPF will be utilized by the EDR sensor to collect data?
Environment
- EDR Server: 7.0.1 and Higher
- EDR Sensor: 6.2.2 and Higher
- Linux: All Supported Versions
Resolution
The OS of the endpoint determines whether eBPF will be utilized by the EDR sensor to collect data.
Additional Information
Currently, supported Ubuntu and SUSE Linux OS's, in addition to CentOS/RHEL 8.x OS's, require the use of eBPF on the EDR sensor.
Feedback
Yes
No
Powered by
