diff --git a/content/en/docs/concepts/event-sources/kernel/_index.md b/content/en/docs/concepts/event-sources/kernel/_index.md index 83e23c15e..4d9c97327 100644 --- a/content/en/docs/concepts/event-sources/kernel/_index.md +++ b/content/en/docs/concepts/event-sources/kernel/_index.md @@ -7,6 +7,8 @@ aliases: - drivers - ../drivers - ../../drivers +- ../../event-sources/kernel +- ../../event-sources/drivers --- Falco uses different instrumentations to analyze the system workload and pass security events to {{< glossary_tooltip text="userspace" term_id="user-space" >}}. We usually refer to these instrumentations as {{< glossary_tooltip text="drivers" term_id="drivers" >}} since a driver runs in {{< glossary_tooltip text="kernelspace" term_id="kernel-space" >}}. The driver provides the **syscall event source** since the monitored events are strictly related to the {{< glossary_tooltip text="syscall" term_id="syscalls" >}} context.