On my work machine, crowdstrike is using ebpf. Not loading any kernel modules.