/docs/use-cases/host-system-changes/ Recent content in Host System Changes on Tetragon - eBPF-based Security Observability and Runtime Enforcement Hugo en /docs/use-cases/host-system-changes/linux-kernel-modules/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/use-cases/host-system-changes/linux-kernel-modules/ Monitoring kernel modules helps to identify processes that load kernel modules to add features, to the operating system, to alter host system functionality or even hide their behaviour. This can be used to answer the following questions: Which process or container is changing the kernel? Which process or container is loading or unloading kernel modules in the cuslter? Which process or container requested a feature that triggered the kernel to automatically load a module?