search

CrowdStrike / falcon-scripts

Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor
The Unlicense
137 stars 81 forks source link

Change "Node Kernel Mode DaemonSet" in README.md #202

Closed kuhnskc closed 2 months ago

kuhnskc commented 11 months ago

Somebody brought this up to me and I figured it was worth sharing. The mention of "Node Kernel Mode DaemonSet" is a little confusing. Since our DaemonSet can be set to run in BPF or Kernel mode, this made it sound like there were separate DaemonSet images for kernel and BPF.

Probably a more clear way to mention it's one Node DaemonSet that can be set to run in kernel or BPF mode.

"Use this bash script to pull the latest Falcon Container sensor, Node Kernel Mode DaemonSet sensor...."

carlosmmatos commented 11 months ago

Makes sense to me. @redhatrises what do you think?

redhatrises commented 11 months ago

Yeah totally does.... especially as that part was written before eBPF was officially supported in the container image.