Skip to content

Commit c9e0dba

Browse files
committed
Update linux-support-ebpf.md
1 parent bf49a1a commit c9e0dba

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

defender-endpoint/linux-support-ebpf.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -216,9 +216,9 @@ That said, our recommendation would be to plan a move to using eBPF as the prima
216216

217217
In cases where eBPF isn't supported:
218218

219-
- Netlink Fallback: The system falls back to using the Netlink event provider. While Netlink continues to capture process events (e.g., exec, exit, fork, gid, tid), it does not support file system-related events (e.g., rename, unlink) or socket events.
219+
- Netlink Fallback: The system falls back to using the Netlink event provider. While Netlink continues to capture process events (for example, `exec`, `exit`, `fork`, `gid`, or `tid`), it doesn't support file system-related events (for example, `rename`, `unlink`) or socket events.
220220

221-
- Impact: Your workloads will not be disrupted, but you may miss out on specific file and socket-related events that eBPF would otherwise capture.
221+
- Impact: Your workloads won't be disrupted, but you could miss out on specific file and socket-related events that eBPF would otherwise capture.
222222

223223
**4. How Can I Manage Exclusions with the Updated Versions?**
224224

0 commit comments

Comments
 (0)