linux:edr
EDR telemetry on Linux
- Host type
- Linux
- Cost class
- Paid service
- Techniques
- 0
- Rules listed
- 0
- Events
- 0
Licensing
- License or service
- Falcon Insight XDR + Falcon Data Replicator
- What is free
- Nothing
- What costs
- Falcon subscription; FDR module delivers to S3/GCS
- Notes
- Insight prerequisite UNCONFIRMED
- As read on
- 2026-11-01
A vendor statement as read on the date shown; the cost class is the durable part.
Techniques
No ATT&CK analytic names this source.
Rules
No vendor rule names this event or source directly.
Events
No event-level rows: this source is tiered as a whole.