@ainmosni do you really think that there are no orgs using #Crowdstrike Falcon and other tools on their fleets of developer machines running #Linux?

there are many. and that kernel #rootkit module watches EVERYTHING. sometimes it also locks up the entire machine from resource abuse.