LogScale Queries

Query

Linux Sensors in Kernel Mode, User Mode, and RFM

LogScale · Investigation & Troubleshooting · v2 · @sebastian · 24.7.2026

All Queries

Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Queries/Linux Sensors in Kernel Mode, User Mode, and RFM.md. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Helpful-CQL-Queries/Linux%20Sensors%20in%20Kernel%20Mode%2C%20User%20Mode%2C%20and%20RFM.md

DetectionEndpointInvestigationLinuxTroubleshooting

Query contentv2

Download v2
Loading editor…

Version history

Every save keeps the previous content. Open any version to view or download it.

  1. v2current

    24.7.2026, 18:56:32

  2. v1

    24.7.2026, 18:54:38