It would be very helpful if the Linux agent reported FILE_CREATE and FILE_DELETE events. The current REFERENCE: EDR EVENTS doc page shows them as unsupported.
Hello, thanks for letting us know, that’s actually a mistake, it is supported on Linux with eBPF. Will fix the doc right away.
1 Like