[dayglored]

> Crowdstrike could have broken their EDR platform for Linux just as easily.

That's a valid point. However, I don't know if Linux allows the Linux CrowdStrike agent enough privilege to actually panic the kernel. I suspect not, but I'm pinging ShadowAce for an opinion.

[ShadowAce]

I don't know if Linux allows the Linux CrowdStrike agent enough privilege to actually panic the kernel.

I would doubt it. However, without knowing the details of the agent, it's hard to say. User-space programs rarely, if ever, have that kind of access to the kernel.