01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

About console menu [/documentation/239/falcon-console-side-menu] See what’s new Gi

[http

Falcon Sensor for Linux Deployment

Last updated: Jun. 17, 2022

Contents:
Introduction [#introduction]
System requirements [#requirements]
Supported operating systems [#operating-systems]
Supported Falcon sensor installations [#supported-falcon-sensor-installations]
Container and Kubernetes support [#kubernetes-support]
Networking requirements [#networking-requirements]
Allow TLS traffic [#allow-tls-traffic]

Installing the Falcon sensor for Linux directly on the hosts [#install-the-falcon-sensor-for-linux-directly-on-the-hosts]
Installing the Falcon sensor [#installing-the-falcon-sensor]
Verifying sensor installation [#verifying-sensor-installation]
Post-installation options [#post-installation-options]

Advanced installation options [#advanced-installation-options]

Installing to a CID that requires installation tokens [#installing-to-a-cid-that-requires-installation-tokens]
Preparing a host as a master image [#optional-preparing-a-host-as-a-master-image]
Installing with Pay-As-You-Go billing [#optional-installing-with-pay-as-you-go-billing]
Installing with package signature verification [#optional-installing-with-package-signature-verification]
Installing on hosts with Secure Boot enabled [#optional-installing-on-hosts-with-secure-boot-enabled]

Uninstalling the Falcon sensor for Linux on nodes [#uninstall-the-falcon-sensor-for-linux-on-nodes]

Troubleshooting an installation on nodes [#troubleshooting-sensor-installation-on-nodes]
Installation fails [#installation-fails]
Ubuntu installation fails: "Dependent Packages are not Installed" [#ubuntu-installation-fails-dependent-packages-are-not-installed]
SLES installation fails: "Nothing Provides Openssl" [#sles-installation-fails-nothing-provides-openssl]
Verifying that dependencies are Installed [#verify-that-dependencies-are-installed]
Troubleshooting general sensor issues [#troubleshooting-general-sensor-issues]
Verifying that the sensor is running [#verify-that-the-sensor-is-running]
Verifying the sensor files on disk [#verify-the-sensor-files-on-disk]
Verifying the sensor is connected to the CrowdStrike cloud [#verify-that-the-sensor-is-connected-to-the-cloud]
Providing troubleshooting info to Support [#providing-troubleshooting-info-to-support]
Logs [#sensor-logging]
Deploying Falcon sensor for Linux as a DaemonSet on a Kubernetes cluster [#deploying-falcon-sensor-for-linux-as-a-daemon-set-on-a-kubernetes-cluster]
Downloading the Falcon sensor image token [#downloading-the-falcon-sensor-image-token ]
Installing the Falcon sensor as DaemonSet [#installing-the-falcon-sensor-as-daemon-set]
Verifying the Falcon sensor as DaemonSet installation [#verifying-the-falcon-sensor-as-daemon-set-installation]
Uninstalling Falcon sensor as DaemonSet [#uninstalling-falcon-sensor-as-daemon-set]
Updating Falcon sensor as DaemonSet [#updating-falcon-sensor-as-daemon-set]
Network Containment [#network-containment]
Troubleshooting Falcon sensor as DaemonSet [#troubleshooting-falcon-sensor-as-daemon-set]
Query Falcon sensor instance [#query-falcon-sensor-instance ]
Appendix A: Supported kernels [#supported]
amazon 2017.09 [#amazon-2017.09]
amazon 2018.03 [#amazon-2018.03]
amazon 2018.06 [#amazon-2018.06]
amazon extras [#amazon-extras]
amazon extras-5.10 [#amazon-extras-5.10]
amazon extras-5.4 [#amazon-extras-5.4]

debian 10.x [#debian-10.x]

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 1/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon
debian 10.x [#debian 10.x]
debian 11.x [#debian-11.x]
debian 9.x [#debian-9.x]
elrepo 7 [#elrepo-7]
oracle 6.x [#oracle-6.x]
oracle 7.x [#oracle-7.x]
oracle 8.x [#oracle-8.x]
redhat 6.10 [#redhat-6.10]
redhat 6.5 [#redhat-6.5]
redhat 6.6 [#redhat-6.6]
redhat 6.7 [#redhat-6.7]
redhat 6.8 [#redhat-6.8]
redhat 6.9 [#redhat-6.9]
redhat 7.1 [#redhat-7.1]
redhat 7.2 [#redhat-7.2]
redhat 7.3 [#redhat-7.3]
redhat 7.4 [#redhat-7.4]
redhat 7.5 [#redhat-7.5]
redhat 7.6 [#redhat-7.6]
redhat 7.7 [#redhat-7.7]
redhat 7.8 [#redhat-7.8]
redhat 7.9 [#redhat-7.9]
redhat 8 [#redhat-8]
redhat 8.1 [#redhat-8.1]
redhat 8.2 [#redhat-8.2]
redhat 8.3 [#redhat-8.3]
redhat 8.4 [#redhat-8.4]
redhat 8.5 [#redhat-8.5]
suse sles11-sp4 [#suse-sles11-sp4]
suse sles12-sp2 [#suse-sles12-sp2]
suse sles12-sp3 [#suse-sles12-sp3]
suse sles12-sp4 [#suse-sles12-sp4]
suse sles12-sp5 [#suse-sles12-sp5]
suse sles15-sp0 [#suse-sles15-sp0]
suse sles15-sp1 [#suse-sles15-sp1]
suse sles15-sp2 [#suse-sles15-sp2]
suse sles15_sp3 [#suse-sles15-sp3]
ubuntu 14.x [#ubuntu-14.x]
ubuntu 16.x [#ubuntu-16.x]
ubuntu 18.x [#ubuntu-18.x]
ubuntu 20.x [#ubuntu-20.x]
Appendix B: Reduced functionality mode (RFM) [#rfm]
What happens to sensors in RFM? [#what-happens]
How can I tell if my sensor's in RFM? [#how-to-tell-rfm]
Returning an RFM sensor to full functionality [#resolve-rfm]
Need additional support? [#need-additional-support]

Appendix C: Falcon-Kernel-Check tool [#kernel-check]

Before you begin [#before-you-begin]
Extracting the tool [#extracting-the-tool]
Checking kernel compatibility [#checking-kernel-compatibility]
Command-line options [#command-line-options]

Introduction
Falcon sensor for Linux stops breaches by unifying true next-generation antivirus (NGAV) endpoint detection and response (EDR), managed threat hunting, and
threat intelligence automation, using a single lightweight sensor. Falcon sensor for Linux is designed to protect both Linux servers and containers. After the sensor is
installed, it captures events in real time to protect both Linux servers and containers running on these servers.

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 2/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

This guide explains how to install, uninstall, and troubleshoot the Falcon sensor for Linux.

System requirements

Supported operating systems

We support x86_64 and Graviton 64 versions of these Linux server OSes. For specific kernel versions, see Linux Supported Kernels [/documentation/245/linux-
supported-kernels] .

x86_64

Supported OSes Unsupported OSes

Alma Linux
8.4: sensor version 6.29.12606 and later

Amazon Linux 2

Amazon Linux AMI

Amazon Linux AMI
2018.03
2017.03: last supported on sensor version 5.43.10807
2017.09

CentOS
8.5: sensor version 6.33.13003 and later
8.4: sensor version 6.24..12104 and later
8.3
8.2: sensor version 5.34.9917 and later CentOS
8.1: sensor version 5.27.9101 and later 7.1 - 7.3: last supported on sensor version 5.43.10807
8.0 6.5 - 6.6: last supported on sensor version 5.43.10807
7.9: sensor version 5.43.10803 and later
7.8: sensor version 5.30.9510 and later
7.4 - 7.7
6.7 - 6.10

Debian
11: sensor version 6.34.13108 and later
10: sensor version 6.20.11711 and later
9.1-9.4: sensor version 5.33.9804 and later

Oracle Linux
Oracle Linux 8 - UEK 6
Oracle Linux 7 - UEK 6: sensor version 6.19.11610 and later
Oracle Linux 7 - UEK 3, 4, 5
Oracle Linux 6 - UEK 3, 4
Red Hat Compatible Kernels (supported RHCK kernels are the same as for RHEL)

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 3/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Supported OSes Unsupported OSes

Red Hat Enterprise Linux CoreOS (RHCOS)

Note: For DaemonSet deployment only.

4.6: sensor version 6.39.13601 and later
4.7: sensor version 6.39.13601 and later
4.8: sensor version 6.39.13601 and later
4.9: sensor version 6.39.13601 and later

Red Hat Enterprise Linux (RHEL)

8.5: sensor version 6.33.13003 and later
8.4: sensor version 6.24..12104 and later
8.3
8.2: sensor version 5.34.9917 and later Red Hat Enterprise Linux (RHEL)
8.1: sensor version 5.27.9101 and later 7.1 - 7.3: last supported on sensor version 5.43.10807
8.0 6.5 - 6.6: last supported on sensor version 5.43.10807
7.9: sensor version 5.43.10803 and later
7.8: sensor version 5.30.9510 and later
7.4 - 7.7
6.7 - 6.10

Rocky Linux
8.4: sensor version 6.29.12606 and later

SUSE Linux Enterprise (SLES)

SUSE Linux Enterprise (SLES)
15 - 15.3. SLES 15 SP3: sensor version 6.26.12303 and later
11.3
12.2 - 12.5. SLES 12 SP5: sensor version 5.27.9101 and later
12.1: last supported on sensor version 5.43.10807
11.4: you must also install OpenSSL version 1.0.1e or later

Ubuntu
20.04 LTS: sensor version 5.43.10807 and later
18-AWS Ubuntu
18.04 LTS 14.04 LTS: last supported on sensor version 5.43.10807
16-AWS
16.04 LTS and 16.04.5 LTS

We support Linux servers and desktops running supported long term support (LTS) kernels [/documentation/20/falcon-host-sensor-deployment-guide-linux-kernel-
based-sensor#supported] . Other kernel versions, such as custom or hardware enablement (HWE) are unsupported.

Graviton
We support Graviton versions of Amazon Linux 2 using sensor version 5.34.9717 or later. For specific kernel versions, see Appendix A [/documentation/20/falcon-
host-sensor-deployment-guide-linux-kernel-based-sensor#supported] .

We support Linux servers and desktops running supported long term support (LTS) kernels [/documentation/20/falcon-host-sensor-deployment-guide-linux-kernel-
based-sensor#supported] . Other kernel versions, such as custom or hardware enablement (HWE) are unsupported.

Supported Falcon sensor installations

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 4/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

To secure containers in cloud environments such as Kubernetes, the Falcon sensor can be installed these ways; they each provide runtime protection for the host and
containers running on the node:

Install Falcon sensor directly on the host.

Deploy Falcon sensor as a DaemonSet on Kubernetes cluster.

Container and Kubernetes support

To secure containers in cloud environments such as Kubernetes, install Falcon sensor for Linux on the host worker nodes. This provides runtime protection for the
node and the containers running on the worker nodes.

Note: To secure Kubernetes pods in clusters where it isn’t possible to deploy the kernel-based Falcon sensor for Linux on the worker node, as with AWS
Fargate where organizations don’t have access to the kernel and where privileged containers are disallowed, install Falcon Container sensor instead. The
Falcon Container sensor for Linux runs as an unprivileged container in user space and doesn’t have dependency on the kernel. See Falcon Container
sensor for Linux [/documentation/146/falcon-container-sensor-for-linux] .

Note that docker is supported on the following Linux OSes only:

Amazon Linux 2 - LNX 5.26.9003+ required

x86_64: sensor version 5.26.9003 and later

Graviton: sensor version 5.34.9717 and later

Amazon Linux 2018.03

CentOS7 and RHEL 7

CentOS 7.9/RHEL 7.9: sensor version 5.43.10803

CentOS 7.8/RHEL 7.8: sensor version 5.30.9510 and later

Debian 9.1-9.4: sensor version 5.33.9804 and later

Ubuntu

Ubuntu 20.04: sensor version 5.43.10807 and later

Ubuntu 18.04: sensor version 5.27.9101 and later

Ubuntu 16.04

Ubuntu 14.04

SUSE Linux Enterprise (SLES)

SLES 15: sensor version 5.26.9003

SLES 12

SLES 12 SP5: sensor version 5.28.9205 and later

SLES 12 SP4

SLES 12 SP3

Networking requirements

Allow TLS traffic

After agent installation, an agent opens a permanent TLS connection over port 443 and keeps that connection open until the endpoint is turned off or the network
connection is terminated.

Depending on your network environment, you might need to allow TLS traffic on port 443 between your network and our cloud's network addresses:
https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 5/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Cloud name Cloud network addresses

US-1 ts01-b.cloudsink.net

(most customers) lfodown01-b.cloudsink.net

ts01-laggar-gcw.cloudsink.net
US-GOV-1
lfodown01-laggar-gcw.cloudsink.net

ts01-lanner-lion.cloudsink.net
EU-1
lfodown01-lanner-lion.cloudsink.net

ts01-gyr-maverick.cloudsink.net
US-2
lfodown01-gyr-maverick.cloudsink.net

If your network requires allowing by IP address instead of FQDN, see Cloud IP Addresses [/documentation/65/cloud-ip-addresses] for a list of IP addresses we use.

We use AWS for some communications between hosts and the CrowdStrike cloud.

Avoid interference with certificate pinning

The Falcon sensor uses certificate pinning to defend against man-in-the-middle attacks. Some network configurations, such as deep packet inspection, interfere with
certificate validation.

Disable deep packet inspection (also called "HTTPS interception," "TLS interception," or "SSL inspection") or similar network configurations. Common sources of
interference with certificate pinning include antivirus systems, firewalls, or proxies.

Installing the Falcon sensor for Linux directly on the hosts

Installing Falcon sensor for Linux on the host provides runtime protection for the host and the containers running on the host.

To install the Falcon sensor on the nodes, perform these procedures:

1. Installing the Falcon sensor.

2. Verifying the installation.

For information about other installation considerations, see Advanced installation options [#advanced-installation-options] .

Installing the Falcon sensor

1. Verify the host kernel is compatible by using the Falcon-Kernel-Check tool [#kernel-check] .

2. Download the Falcon sensor installer from Host setup and management > Deploy > Sensor Downloads [/hosts/sensor-downloads] .

3. Copy your Customer ID Checksum (CID), displayed on Sensor Downloads.

4. Run the installer, substituting <installer_filename> with your installer's file name.

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 6/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Installing the sensor requires sudo privileges.

Ubuntu: sudo dpkg -i <installer_filename>

RHEL, CentOS, Amazon Linux: sudo yum install <installer_filename>

SLES: sudo zypper install <installer_filename>

5. Set your CID on the sensor, substituting <CID> with your CID. This step is not required for versions 4.0 and earlier.

All OSes: sudo /opt/CrowdStrike/falconctl -s --cid=<CID>

6. Start the sensor manually. This step is not required for versions 4.0 and earlier.

Hosts with SysVinit: sudo service falcon-sensor start

Hosts with Systemd: sudo systemctl start falcon-sensor

Verifying sensor installation

You can verify an installation by using the Falcon console or a terminal on the host.

Falcon console
After the sensor is installed, the host connects to the Falcon console. You can confirm a sensor installation by reviewing your hosts.

To view a complete list of newly installed sensors, use the Sensor Report [/investigate/events/en-US/app/eam2/sensor_app] in the Falcon console.

Host
To validate that the Falcon sensor for Linux is running on a host, run this command at a terminal:

ps -e | grep falcon-sensor

You'll see output similar to this:

[root@centos6-installtest ~]# sudo ps -e | grep falcon-sensor

905 ? 00:00:02 falcon-sensor

Post-installation options

Managing sensor grouping tags

Sensor grouping tags are optional, user-defined identifiers you can use to group and filter hosts.

Note: This section is about sensor grouping tags, which you can use with sensor images and templates. For more information about these tags and how
they compare to Falcon grouping tags, see Using grouping tags [/documentation/67/host-and-host-group-management#using-grouping-tags] .

Assigning sensor grouping tags

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 7/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Assign tags to a host using the --tags switch.

Tags are case-sensitive.

Tags can include these characters Tags can't include these characters

Letters ( a-z , A-Z ) Spaces ( )

Numbers ( 0-9 ) Commas ( , )

Hyphens ( - )

Underscores ( _ )

Forward slashes ( / )

To assign multiple tags, separate tags with commas. The combined length of all tags for a host, including comma separators, cannot exceed 256 characters.

For example, to add the tags Washington/DC_USA and Production to a host, use this syntax:

sudo /opt/CrowdStrike/falconctl -s --tags="Washington/DC_USA,Production"

Tag changes take effect the next time the sensor restarts.

To restart a sensor with SystemD: systemctl restart falcon-sensor

To restart a sensor with SysVinit: service falcon-sensor start

Viewing a host's sensor grouping tags

Falcon console

Use Host Management [/hosts/hosts] to search for the host. The Grouping Tags information for the host includes Falcon grouping tags and sensor grouping tags.

Host

To see the tags currently assigned to a host, use the -g option:

sudo /opt/CrowdStrike/falconctl -g --tags

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 8/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Removing sensor grouping tags

To remove all tags from a host:

sudo /opt/CrowdStrike/falconctl -d -f --tags

Tags changes take effect the next time the sensor restarts.

To restart a sensor with SystemD: systemctl restart falcon-sensor

To restart a sensor with SysVinit: service falcon-sensor start

Configuring a proxy
If your hosts use a proxy, configure the Falcon sensor to use it:

Configure proxy: sudo /opt/CrowdStrike/falconctl -s --aph=<proxy host> --app=<proxy port>

Confirm config: sudo /opt/CrowdStrike/falconctl -g --aph --app

Enable proxy: sudo /opt/CrowdStrike/falconctl -s --apd=FALSE

Disable proxy: sudo /opt/CrowdStrike/falconctl -s --apd=TRUE

Advanced installation options

Installing to a CID that requires installation tokens

Installation tokens [/documentation/67/host-and-host-group-management#protecting-your-cid-with-installation-tokens] prevent unauthorized hosts from being
accidentally or maliciously added to your customer ID (CID). Installation tokens are an optional security measure for your CID. To use installation tokens, you create
one or more tokens in the Falcon console or through the API, enable the token requirement, and then provide the tokens to sensors at installation time.

When you install a sensor after enabling Require tokens, the falconctl command must include an additional parameter and an active token:

sudo /opt/CrowdStrike/falconctl -s --cid=<CID> --provisioning-token=ABCD1234

Preparing a host as a master image

If you're preparing a host as a "master" device for cloning or virtualization, you must remove your "master" host's agent ID (AID).

To create a new master image template with no agent ID:

1. Prepare your master image instance, including any software configuration or updates.

2. Download the Falcon sensor installer from Host setup and management > Deploy > Sensor Downloads [/hosts/sensor-downloads] or by using sensor
download APIs [/documentation/109/sensor-download-apis] .

3. Copy your Customer ID Checksum (CID), displayed on Sensor Downloads.

4. Run the installer, substituting <installer_filename> with your installer's file name.

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 9/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Ubuntu: sudo dpkg -i <installer_filename>

RHEL, CentOS, Amazon Linux: sudo yum install <installer_filename>

SLES: sudo zypper install <installer_filename>

5. After installing, run this falconctl command to remove the host's agent ID:

sudo /opt/CrowdStrike/falconctl -d -f --aid

6. Create your clones or VMs based on this master image.

7. According to your organization's update policies, plan to regularly re-create this master image using an up-to-date Falcon sensor installer.

To automate this more effectively, consider using sensor download APIs [/documentation/109/sensor-download-apis] to automatically retrieve
new versions of the Falcon sensor. Then, use your organization's existing automation tools to install the newer version on your master image
without an agent ID.

When your cloned devices or virtual machines first contact the CrowdStrike cloud, they'll be automatically assigned a unique AID. If multiple devices use the same
AID, the CrowdStrike cloud will process all their events as though they came from a single device.

Installing with Pay-As-You-Go billing

See Falcon for Cloud Workloads [/documentation/102/falcon-for-cloud-workloads] for more info.

To create a new master image template with no agent ID and Pay-As-You-Go billing enabled:

1. Prepare your master image instance, including any software configuration or updates.

2. Download the Falcon sensor installer from Host setup and management > Deploy > Sensor Downloads [/hosts/sensor-downloads] or by using sensor
download APIs [/documentation/109/sensor-download-apis] .

3. Copy your Customer ID Checksum (CID), displayed on Sensor Downloads.

4. Run the installer, substituting <installer_filename> with your installer's file name.

Ubuntu: sudo dpkg -i <installer_filename>

RHEL, CentOS, Amazon Linux: sudo yum install <installer_filename>

SLES: sudo zypper install <installer_filename>

5. After installing, run these falconctl commands to remove the host's agent ID, set your customer ID (CID), and configure the sensor for Pay-As-You-Go

billing:

sudo /opt/CrowdStrike/falconctl -d -f --aid

sudo /opt/CrowdStrike/falconctl -s --cid=<CID>

sudo /opt/CrowdStrike/falconctl -s --billing=metered

6. Configure your cloud workloads to create ephemeral images based on this master image.

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 10/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

7. According to your organization's update policies, plan to regularly re-create this master image using an up-to-date Falcon sensor installer.

To automate this more effectively, consider using sensor download APIs [/documentation/109/sensor-download-apis] to automatically retrieve
new versions of the Falcon sensor. Then, use your organization's existing automation tools to install the newer version on your master image
without an agent ID.

To change an existing Falcon sensor to use Pay-As-You-Go billing, run this falconctl command, then restart the sensor:

sudo /opt/CrowdStrike/falconctl -s --billing=metered

Installing with package signature verification

For hosts with signature verification enabled, it needs to validate the sensor package’s signature. To do this, download and import the RPM signing, GPG key from
Tools Download [/support/tool-downloads] . That verifies the key during installation.

If the key hasn’t been imported, hosts requiring the signature key generate an error similar to this one during the install. When this error occurs, try downloading and
importing the key again.

falcon-sensor-4.5.0-5011.suse12.x86_64 (Plain RPM files cache): Signature verification failed [4-Signatures public key
is not available]

To import the key :

1. Download falcon-sensor.gpg from Support and resources > Resources and tools > Tool downloads [/support/tool-downloads]

2. Place it in your working directory

3. Run the import command from your working directory with elevated permissions:

# rpm --import falcon-sensor.gpg

4. Run the sensor installation [/documentation/20/falcon-sensor-for-linux-deployment-guide#install-the-falcon-sensor-for-linux]

For more information on signature verification, refer to your distro’s documentation, such as the Red Hat Deployment Guide
[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/s1-check-rpm-sig] .

Installing on hosts with Secure Boot enabled

Hosts with Secure Boot enabled require a CrowdStrike public key to load signed kernel modules. If Secure Boot is enabled without the CrowdStrike public key, the
Falcon sensor will run in Reduced Functionality Mode (RFM) [https://supportportal.crowdstrike.com/s/article/Reduced-Functionality-Mode-for-Linux-Sensors] .

Hosts with Secure Boot enabled will see a similar message in dmesg:

[ 0.000000] secureboot: Secure boot enabled

[ 0.000000] Kernel is locked down from EFI secure boot; see man kernel_lockdown.7

Requirements for Hosts with Secure Boot

Ubuntu 18.04 or later, RHEL/CentOS, or SUSE/SLES

OpenSSL

Ubuntu:

apt-get install openssl

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 11/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

RHEL/CentOS:

yum install openssl

SUSE/SLES:

zypper install openssl

Mokutil

Ubuntu:​​

apt-get install mokutil

RHEL/CentOS:

yum install mokutil

SUSE/SLES:

zypper install mokutil

crowdstrike_signing.x509 public signing key, Linux Sensor code signing certificate, 2021, available for download from Tools Download [/support/tool-
downloads]

Installing on hosts with Secure Boot

1. Import CrowdStrike's public signing key.

1. Using mokutil , import crowdstrike_signing.x509 public key to MOK.der:

mokutil --import <yourpath>/crowdstrike_signing.x509

Where <yourpath> is where you’ve saved the certificate.

2. Create a mokutil password. It’s needed to enroll the key later, and is separate from your root/system password.

2. Reboot the host.

3. When prompted during the reboot, enroll the machine-owner key (MOK) using the OS menu.

On Ubuntu, this prompt appears before the GRUB menu.

The password used in this step is the one you defined when using mokutil to import CrowdStrike's public signing key.

4. Verify that CrowdStrike's signing key was added to the kernel:

sudo cat /proc/keys | grep crowdstrike

The output should include information about CrowdStrike's key, such as:

asymmetri Crowdstrike, Inc: www.crowdstrike.com: <hash>: X509.rsa

Hosts with Secure Boot don't run in RFM [/documentation/20/falcon-sensor-for-linux#how-to-tell-rfm] after importing CrowdStrike's signing key.

Uninstalling the Falcon sensor for Linux on nodes

Run these commands to uninstall the Falcon sensor from your host.
https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 12/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Uninstalling the sensor requires sudo privileges.

Ubuntu: sudo apt-get purge falcon-sensor

RHEL, CentOS, Amazon Linux: sudo yum remove falcon-sensor

SLES: sudo zypper remove falcon-sensor

Troubleshooting an installation on nodes

Installation fails

Issue
Your sensor installation fails.

Solution
Verify that the SHA-256 checksum of the installer file you downloaded matches the SHA-256 checksum shown in Host setup and management > Deploy > Sensor
Downloads [/hosts/sensor-downloads] .

Ubuntu installation fails: "Dependent Packages are not Installed"

Issue
Your Ubuntu installation fails with an error that "dependent packages are not installed."

Solution
Use this command to install the dependent packages:

$ apt-get -f install

SLES installation fails: "Nothing Provides Openssl"

Issue

Your SLES installation fails with an error that nothing provides openssl1 >= 1.0.1 . This is most commonly caused by a SLES version that doesn't include a

modern OpenSSL implementation.

Solution

1. Enable the SLES 11 security module: $ sudo zypper mr --enable SLE11-Security-Module

2. Run the sensor installer again.

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 13/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Verifying that dependencies are Installed

Issue

Your installation fails with an error message about missing dependencies of libssl , libc , or libcrypto .

--> Missing Dependency: libssl.so.10()(64bit) is needed by package falcon-sensor-1.0.3-1.e16x86_64

(/falcon-sensor-1.0.3-1.e16.x86_64)
Error Missing Dependency: libc.so.6(GLIBC_2.7)(64bit) is needed by package falcon-sensor-1.0.3-
1.e16x86_64 (/falcon-sensor-1.0.3-1.e16.x86_64)
Error Missing Dependency: libcrypto.so.10()(64bit) is needed by package falcon-sensor-1.0.3-
1.e16x86_64 (/falcon-sensor-1.0.3-1.e16.x86_64)

Solution
Install a supported version [/documentation/20/falcon-host-sensor-deployment-guide-linux-kernel-based-sensor#requirements] of OpenSSL.

Troubleshooting general sensor issues

Verifying that the sensor is running

1. Check running processes to verify the Falcon sensor is running: ps -e | grep -e falcon-sensor

2. Check kernel modules to verify the Falcon sensor's kernel modules are running: lsmod | grep falcon

3. Check the Falcon sensor's configurable options: sudo /opt/CrowdStrike/falconctl -g

Optional parameters:

--aid : the sensor's agent ID

--cid : your Customer ID

--apd : the sensor's proxy status (enabled or disabled)

--aph : the sensor's proxy host

--app : the sensor's proxy port

--version : the sensor's version number

The sensor requires these runtime services:

network

systemd

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 14/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

local-fs

sysinit

multi-user

shutdown

Verifying the sensor files on disk

If the sensor is not running, verify that the sensor's application files exist on your host:

$ sudo ls -al /opt/CrowdStrike /opt/CrowdStrike/falcon-sensor

This should be a symlink to either:

the original sensor installation at /opt/CrowdStrike/falcon-sensor

a sensor update package with a release build number, such as /opt/CrowdStrike/falcon-sensor3000

Verifying the sensor is connected to the CrowdStrike cloud

You can verify that the host is connected to the CrowdStrike cloud by using the Falcon console or a command line on the host.

Falcon console
Search for the host in Host setup and management > Manage endpoints > Host management [/hosts/hosts] .

To view a complete list of newly installed sensors, use the Sensor Report [/investigate/events/en-US/app/eam2/sensor_app] .

Host
Check network statistics using the command line:

sudo netstat -tapn | grep falcon

If the Falcon sensor is communicating with the cloud, you'll see output like this:

tcp 0 0 192.0.2.176:35382 ec2-54-148-96-12:443

ESTABLISHED 3228/falcon-sensor

Providing troubleshooting info to Support

When you need help from Support with a sensor, collect data using the falcon-diagnostic script. To download this script, see Troubleshooting Linux Sensors

[https://supportportal.crowdstrike.com/s/article/Troubleshooting-Linux-Sensors] .

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 15/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Logs
Logs are stored within your host's syslog. The syslog locations vary but are specified in /etc/syslog.conf or rsyslog.conf , with these being the most

common:

/var/log/messages

var/log/syslog

/var/log/rsyslog

/var/log/daemon

grep for the string falcon for sensor logs, similar to this example:

sudo grep falcon /var/log/messages | tail -n 100

Logs are kept according to your host's log rotation settings.

Deploying Falcon sensor for Linux as a DaemonSet on a Kubernetes

cluster
Deploying the Falcon sensor from a container image on a Kubernetes cluster as a DaemonSet protects both the host and the container workloads. Use this
deployment method for hosts that don’t allow traditional packages such as RPM and deb to be installed directly through the host shell.

Note: Falcon sensor as a DaemonSet is supported on nodes that run a Linux kernel version supported by Falcon sensor.

Prerequisites

Ensure that docker, kubectl, and helm are installed.

Ensure that docker is allowed access to the CrowStrike container registry.

Ensure that kubectl is allowed access to the kube-api server to create the Kubernetes resources, including the DaemonSet.

To deploy the Falcon sensor as a DaemonSet, perform these procedures:

1. Download the Falcon sensor image token (perform for each CID)

2. Install the Falcon sensor as DaemonSet (perform for each Kubernetes cluster)

3. Verify the installation (perform for each Kubernetes cluster)

Downloading the Falcon sensor image token

Note: Perform this procedure for each CID.

You need to create an API client key pair to allow access to the CrowdStrike container registry.

The registry download is available in all cloud regions for version 6.35.13207 and later

To download the Falcon sensor image token:

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 16/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

[YOUR CLOUD] US-1 = api

[YOUR CLOUD] US-2 = api.us-2
[YOUR CLOUD] EU-1 = api.eu-1
[YOUR CLOUD] GOV-1 = api.laggar.gcw
[YOUR CLOUD LOWER] US-1 = us-1
[YOUR CLOUD LOWER] US-2 = us-2
[YOUR CLOUD LOWER] EU-1 = eu-1
[YOUR CLOUD LOWER] GOV-1 = govcloud
[YOUR REGISTRY] US-1 = registry
[YOUR REGISTRY] US-2 = registry
[YOUR REGISTRY] EU-1 = registry
[YOUR REGISTRY] GOV-1 = registry.laggar.gcw
[YOUR CLOUD TAG] US-1 = US-1
[YOUR CLOUD TAG] US-2 = US-2
[YOUR CLOUD TAG] EU-1 = EU-1
[YOUR CLOUD TAG] GOV-1 = US-GOV-1

1. In the Falcon console, go to Support and resources > Resources and tools > API clients and keys [/support/api-clients-and-keys] .

2. Click Add new API client.

3. For the Falcon Images Download option in the list, select Read.

4. Click Add. The API client created dialog box shows your client ID and secret.

5. Copy the client ID and secret to a password management or secret management service.

6. Log in to CrowdStrike's API gateway using curl to get an OAuth2 token:

RESPONSE=$(curl \
--data "client_id=${CS_CLIENT_ID}&client_secret=${CS_CLIENT_SECRET}"
\--request POST \
--silent \
https://[YOUR CLOUD].crowdstrike.com/oauth2/token)

7. Use the token returned as a Bearer Token to the API:

curl -i -X GET -H "authorization: Bearer ${BEARER_TOKEN}" \

https://[YOUR CLOUD].crowdstrike.com/container-security/entities/image-registry-
credentials/v1

8. Copy your Customer ID (CID) from the Sensor Downloads page. Save it as the variable CID. The CID must be lowercase, and must not include the checksum.

For example: CID=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

9. Set the token returned as ART_PASSWORD and set ART_USERNAME as fc-${CID}

10. Create the namespace falcon-system :

# kubectl create namespace falcon-system

Note: If this deployment is on an OpenShift cluster, execute this command:

# oc adm policy add-scc-to-user privilegedsystem:serviceaccount:falcon-system:default

11. Create the Kubernetes Secrets in the falcon-system namespace and set FALCON_IMAGE_SECRET="cs-registry-secret" in one of these ways:

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 17/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Create the Kubernetes Secret resource using the command line

# kubectl create secret docker-registry cs-registry-secret \

--docker-server=[YOUR REGISTRY].crowdstrike.com \
--docker-username="${ART_USERNAME}" \
--docker-password="${ART_PASSWORD}" \
--namespace falcon-system

Log in to Docker, generate a base64 encoded string of the Docker config JSON, and populate that output in the YAML file to create the Kubernetes
Secrets resource.

1. Log in to Docker:

# docker login --username ${ART_USERNAME} --password ${ART_PASSWORD}

[YOUR REGISTRY].crowdstrike.com

2. Generate the base64 encoding of the secret:

# IMAGE_PULL_TOKEN=$(cat ${HOME}/.docker/config.json | jq -c -r '{auths: { "[YOUR

REGISTRY].crowdstrike.com": { auth: .auths."[YOUR REGISTRY].crowdstrike.com".auth }}}' | base64 -w 0)

3. Create the Kubernetes Secrets resource with this YAML:

# kubectl create -f - <<EOF

apiVersion: v1

kind: Secret

metadata:

name: cs-registry-secret

namespace: falcon-system

data:

.dockerconfigjson: <IMAGE_PULL_TOKEN>

type: kubernetes.io/dockerconfigjson

EOF

Note: <IMAGE_PULL_TOKEN> refers to the base64 encoded string.

12. Set FALCON_IMAGE_REPO to:

[YOUR REGISTRY].crowdstrike.com/falcon-sensor/ [YOUR CLOUD LOWER]/release/falcon-sensor

13. Set FALCON_IMAGE_TAG to:

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 18/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

<VERSION>.falcon-linux.x86_64.Release.[YOUR CLOUD TAG]

For the <VERSION> value, see Falcon Sensor release notes [https://supportportal.crowdstrike.com/s/release-notes] .

Installing the Falcon sensor as DaemonSet

Note: Perform this procedure for each Kubernetes cluster.

1. Configure the Helm repository by running this Helm command:

# helm repo add crowdstrike

https://crowdstrike.github.io/falcon-helm
# helm repo update
# helm repo list

For Helm chart versions and their corresponding supported Falcon sensor versions, see https://artifacthub.io/packages/helm/falcon-helm/falcon-sensor
[https://artifacthub.io/packages/helm/falcon-helm/falcon-sensor] .

2. Install the Falcon sensor as DaemonSet using Helm by running this Helm command:

# helm upgrade --install falcon-helm crowdstrike/falcon-sensor

\
-n falcon-system \
--set falcon.cid="$CID" \
--set node.image.repository="$FALCON_IMAGE_REPO" \
--set node.image.tag="$FALCON_IMAGE_TAG" \
--set node.image.pullSecrets="$FALCON_IMAGE_SECRET"

For more configurable options, refer to:

https://artifacthub.io/packages/helm/falcon-helm/falcon-sensor#falcon-configuration-options

https://artifacthub.io/packages/helm/falcon-helm/falcon-sensor#node-configuration

Verifying the Falcon sensor as DaemonSet installation

Note: Perform this procedure for each Kubernetes cluster.

All the deployed Falcon sensor Pods should be in Running state.

# helm status falcon-helm -n falcon-system

# kubectl get all -n falcon-system

To verify connection to the CrowdStrike cloud, see Verifying the sensor is connected to the CrowdStrike cloud. [/documentation/20/falcon-sensor-for-linux#verify-
that-the-sensor-is-connected-to-the-cloud]

Uninstalling Falcon sensor as DaemonSet

Note: Perform this procedure for each Kubernetes cluster.

Uninstalling the Falcon sensor as DaemonSet requires these steps:

1. Remove the DaemonSet deployment

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 19/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

2. Remove CrowdStrike Helm repo

3. Cleanup /opt/CrowdStrike directory on all nodes

4. Remove falcon-system namespace

Uninstalling the sensor as DaemonSet:

1. Remove the DaemonSet installation by running this helm command:

# helm status falcon-helm -n falcon-system

# helm uninstall falcon-helm -n falcon-system

2. Remove the DaemonSet helm repo by running this helm command:

# helm repo remove crowdstrike

3. Clean up directories on the worker nodes by doing this:

1. Create a YAML file with the appropriate Falcon sensor image.

2. Create a cleanup DaemonSet deployment. Wait until all pods are successfully deployed and reach a running state.

Note: If a pod goes to an error state, check the logs of the failed pod.

3. Delete the cleanup DaemonSet deployment.

This example shows how to clean up the /opt/CrowdStrike directory in all nodes the pod is successfully deployed on.

Note: Pay special attention to the command mentioned in the YAML, since it removes content on the host filesystem.

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 20/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

apiVersion: apps/v1
kind: DaemonSet
metadata:
name: cleanup-opt-crowdstrike
namespace: falcon-system
spec:
selector:
matchLabels:
name: cleanup
template:
metadata:
labels:
name: cleanup
spec:
nodeSelector:
kubernetes.io/os: linux
tolerations:
- operator: Exists
effect: NoExecute
- operator: Exists
effect: NoSchedule
initContainers:
- name: cleanup
image: <IMAGE_REPO>:<IMAGE_TAG>
command: ["rm", "-rf", "/opt/CrowdStrike"]
securityContext:
runAsUser: 0
privileged: true
readOnlyRootFilesystem: true
allowPrivilegeEscalation: true
volumeMounts:
- name: opt-crowdstrike
mountPath: /opt
volumes:
- name: opt-crowdstrike
hostPath:
path: /opt
containers:
- name: pause
image: gcr.io/google_containers/pause
<IMAGE_REPO> - Refers to $FALCON_IMAGE_REPO
<IMAGE_TAG> - Refers to $FALCON_IMAGE_TAG

# kubectl create -f cleanup.yaml

# kubectl get pods -n falcon-system
# kubectl delete -f cleanup.yaml

4. Remove privileged Security Context Constraints (SCC) association from falcon-system namespace

Note: This applies only to OpenShift deployment:

# oc adm policy remove-scc-from-user privileged

system:serviceaccount:falcon-system:default

5. Remove the falcon-system namespace by running this command:

# kubectl delete namespace falcon-system

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 21/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Updating Falcon sensor as DaemonSet

Note: Perform this procedure for each Kubernetes cluster.

Falcon sensor as DaemonSet does not support sensor updates from the Crowdstrike cloud. The only way to upgrade the sensor version is to perform this helm
update.

# helm upgrade --install falcon-helm crowdstrike/falcon-sensor \

-n falcon-system \
--set falcon.cid="$CID" \*
--set node.image.repository="$FALCON_IMAGE_REPO" \
--set node.image.tag="$FALCON_IMAGE_TAG" \
--set node.image.pullSecrets="$FALCON_IMAGE_SECRET"

To verify the update, see Verifying the Falcon sensor as DaemonSet installation [/documentation/20/falcon-sensor-for-linux#verifying-the-falcon-sensor-as-daemon-
set-installation] .

Network Containment
In AKS, if a worker node is network contained, the cloud provider spins up a new worker node with the same host name, and all the pods hosted on that worker node
are redeployed.

Troubleshooting Falcon sensor as DaemonSet

Query Falcon sensor instance

Individual Falcon sensor instances can be queried for their state by running a pod on the appropriate worker node. This sample YAML command queries the agent ID
for a specific Falcon sensor instance running on a worker node:

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 22/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

apiVersion: v1
kind: Pod
metadata:
name: falconctl
namespace: falcon-system
labels:
app: falconctl
spec:
nodeName: <NODE_NAME>
initContainers:
- name: falconctl
image: <IMAGE_REPO>:<IMAGE_TAG>
# This below attribute can be updated with any of the falconctl commands.
command: ["falconctl", "-g", "--aid"]
securityContext:
runAsUser: 0
privileged: true
readOnlyRootFilesystem: false
allowPrivilegeEscalation: true
containers:
- name: pause
image: gcr.io/google_containers/pause
imagePullPolicy: IfNotPresent
hostNetwork: true
hostPID: true
hostIPC: true

<NODE_NAME> - Refers to the kubernetes node on which the command should be executed

<IMAGE_REPO> - Refers to $FALCON_IMAGE_REPO

<IMAGE_TAG> - Refers to $FALCON_IMAGE_TAG

Apply the YAML file to create the falconctl pod and print the logs to get the queried output.

# kubectl create -f falconctl.yaml

# kubectl logs falconctl -c falconctl
# kubectl delete -f falconctl.yaml

The same YAML file can be used to perform all operations that involve the invocation of falconctl by updating the command attribute.

Error Events

If certain functions fail to initialize during container startup, falcon-sensor continues to run and connect to the CrowdStrike cloud and this ErrorEvent is sent to the
CrowdStrike cloud to help identify the initialization errors found in an event search.

ErrorStatus Name Description

0xE0120048 ERROR_DETECT_NAMESPACE_FAILED Failed to detect the Linux Namespace of sensor

0xE0120049 ERROR_CHANGE_NAMESPACE_FAILED Failed to change the Linux Namespace of sensor

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 23/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Appendix A: Supported kernels

For up-to-date information about sensor versions that support specific kernels, see Linux Supported Kernels [/documentation/245/linux-supported-kernels] . This
appendix will be deprecated in June 2022.

Run the command uname -r from a host's command line to find its kernel version.

Unsupported kernels: For kernels not listed here, the sensor runs in reduced functionality mode (RFM) until the Falcon sensor is updated to support that
kernel.

Last updated: June 30, 2022

amazon 2017.09

Kernel Minimum sensor version Last supported sensor version

4.9.70-22.55.amzn1.x86_64 6.28.12504

4.9.58-18.51.amzn1.x86_64 6.28.12504

4.9.81-35.56.amzn1.x86_64 6.28.12504

4.9.77-31.58.amzn1.x86_64 6.28.12504

4.9.93-41.60.amzn1.x86_64 6.28.12504

4.9.75-25.55.amzn1.x86_64 6.28.12504

4.9.85-37.55.amzn1.x86_64 6.28.12504

4.9.76-3.78.amzn1.x86_64 6.28.12504

4.9.51-10.52.amzn1.x86_64 6.28.12504

4.9.62-21.56.amzn1.x86_64 6.28.12504

4.9.85-38.58.amzn1.x86_64 6.28.12504

4.9.116-43.59.amzn1.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 24/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.9.91-40.57.amzn1.x86_64 6.28.12504

4.9.119-44.140.amzn1.x86_64 6.28.12504

4.9.70-25.242.amzn1.x86_64 6.28.12504

4.9.58-18.55.amzn1.x86_64 6.28.12504

amazon 2018.03

Kernel Minimum sensor version Last supported sensor version

4.14.209-117.337.amzn1.x86_64 6.28.12504

4.14.133-88.105.amzn1.x86_64 6.28.12504

4.14.186-110.268.amzn1.x86_64 6.28.12504

4.14.181-108.257.amzn1.x86_64 6.28.12504

4.14.146-93.123.amzn1.x86_64 6.28.12504

4.14.200-116.320.amzn1.x86_64 6.28.12504

4.14.275-142.503.amzn1.x86_64 6.28.12504

4.14.133-88.112.amzn1.x86_64 6.28.12504

4.14.88-72.73.amzn1.x86_64 6.28.12504

4.14.248-129.473.amzn1.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 25/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.262-135.489.amzn1.x86_64 6.28.12504

4.14.77-70.59.amzn1.x86_64 6.28.12504

4.14.193-113.317.amzn1.x86_64 6.28.12504

4.14.70-67.55.amzn1.x86_64 6.28.12504

4.14.88-72.76.amzn1.x86_64 6.28.12504

4.14.97-74.72.amzn1.x86_64 6.28.12504

4.14.225-121.362.amzn1.x86_64 6.28.12504

4.14.281-144.502.amzn1.x86_64 6.28.12504

4.14.106-79.86.amzn1.x86_64 6.28.12504

4.14.67-66.56.amzn1.x86_64 6.28.12504

4.14.138-89.102.amzn1.x86_64 6.28.12504

4.14.165-103.209.amzn1.x86_64 6.28.12504

4.14.252-131.483.amzn1.x86_64 6.28.12504

4.14.94-73.73.amzn1.x86_64 6.28.12504

4.14.114-83.126.amzn1.x86_64 6.28.12504

4.14.173-106.229.amzn1.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 26/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.114-82.97.amzn1.x86_64 6.28.12504

4.14.273-140.502.amzn1.x86_64 6.28.12504

4.14.51-60.38.amzn1.x86_64 6.28.12504

4.14.123-86.109.amzn1.x86_64 6.28.12504

4.14.33-51.34.amzn1.x86_64 6.28.12504

4.14.121-85.96.amzn1.x86_64 6.28.12504

4.14.238-125.421.amzn1.x86_64 6.28.12504

4.14.232-123.381.amzn1.x86_64 6.28.12504

4.14.154-99.181.amzn1.x86_64 6.28.12504

4.14.72-68.55.amzn1.x86_64 6.28.12504

4.14.101-75.76.amzn1.x86_64 6.28.12504

4.14.219-119.340.amzn1.x86_64 6.28.12504

4.14.128-87.105.amzn1.x86_64 6.28.12504

4.14.158-101.185.amzn1.x86_64 6.28.12504

4.14.59-64.43.amzn1.x86_64 6.28.12504

4.14.104-78.84.amzn1.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 27/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.109-80.92.amzn1.x86_64 6.28.12504

4.14.55-62.37.amzn1.x86_64 6.28.12504

4.14.171-105.231.amzn1.x86_64 6.28.12504

4.14.33-51.37.amzn1.x86_64 6.28.12504

4.14.268-139.500.amzn1.x86_64 6.28.12504

4.14.262-135.486.amzn1.x86_64 6.28.12504

4.14.26-46.32.amzn1.x86_64 6.28.12504

4.14.225-121.357.amzn1.x86_64 6.28.12504

4.14.143-91.122.amzn1.x86_64 6.28.12504

4.14.165-102.185.amzn1.x86_64 6.28.12504

4.14.77-69.57.amzn1.x86_64 6.28.12504

4.14.177-107.254.amzn1.x86_64 6.28.12504

4.14.62-65.117.amzn1.x86_64 6.28.12504

4.14.47-56.37.amzn1.x86_64 6.28.12504

4.14.77-70.82.amzn1.x86_64 6.28.12504

4.14.214-118.339.amzn1.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 28/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.42-52.37.amzn1.x86_64 6.28.12504

4.14.203-116.332.amzn1.x86_64 6.28.12504

4.14.238-125.422.amzn1.x86_64 6.28.12504

4.14.152-98.182.amzn1.x86_64 6.28.12504

amazon 2018.06

Kernel Minimum sensor version Last supported sensor version

4.14.173-137.228.amzn2.aarch64 6.28.12504

4.14.173-137.228.amzn2.x86_64 6.28.12504

4.14.268-205.500.amzn2.x86_64 6.30.12704

4.14.181-140.257.amzn2.aarch64 6.28.12504

4.14.238-182.421.amzn2.x86_64 6.28.12504

4.14.241-184.433.amzn2.aarch64 6.34.13108

4.14.55-68.37.amzn2.x86_64 6.28.12504

4.14.97-90.72.amzn2.aarch64 6.28.12504

4.14.243-185.433.amzn2.aarch64 6.34.13108

4.14.177-139.254.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 29/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.200-155.322.amzn2.aarch64 6.28.12504

4.14.203-156.332.amzn2.aarch64 6.28.12504

4.14.181-142.260.amzn2.x86_64 6.28.12504

4.14.154-128.181.amzn2.x86_64 6.28.12504

4.14.273-207.502.amzn2.x86_64 6.30.12704

4.14.72-73.55.amzn2.x86_64 6.28.12504

4.14.133-113.112.amzn2.aarch64 6.28.12504

4.14.152-127.182.amzn2.aarch64 6.28.12504

4.14.238-182.422.amzn2.aarch64 6.28.12504

4.14.243-185.433.amzn2.x86_64 6.28.12504

4.14.198-152.320.amzn2.x86_64 6.28.12504

4.14.214-160.339.amzn2.x86_64 6.28.12504

4.14.232-177.418.amzn2.x86_64 6.28.12504

4.14.219-161.340.amzn2.x86_64 6.28.12504

4.14.252-195.483.amzn2.aarch64 6.34.13108

4.14.173-137.229.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 30/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.138-114.102.amzn2.aarch64 6.28.12504

4.14.256-197.484.amzn2.aarch64 6.34.13108

4.14.59-68.43.amzn2.x86_64 6.28.12504

4.14.171-136.231.amzn2.aarch64 6.28.12504

4.14.104-95.84.amzn2.aarch64 6.28.12504

4.14.128-112.105.amzn2.x86_64 6.28.12504

4.14.158-129.185.amzn2.aarch64 6.28.12504

4.14.209-160.339.amzn2.x86_64 6.28.12504

4.14.152-127.182.amzn2.x86_64 6.28.12504

4.14.106-97.85.amzn2.aarch64 6.28.12504

4.14.275-207.503.amzn2.x86_64 6.30.12704

4.14.232-176.381.amzn2.x86_64 6.28.12504

4.14.198-152.320.amzn2.aarch64 6.28.12504

4.14.114-105.126.amzn2.x86_64 6.28.12504

4.14.225-169.362.amzn2.aarch64 6.28.12504

4.14.231-173.360.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 31/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.114-105.126.amzn2.aarch64 6.28.12504

4.14.109-99.92.amzn2.aarch64 6.28.12504

4.14.106-97.85.amzn2.x86_64 6.28.12504

4.14.121-109.96.amzn2.aarch64 6.28.12504

4.14.246-187.474.amzn2.aarch64 6.34.13108

4.14.123-111.109.amzn2.aarch64 6.28.12504

4.14.165-131.185.amzn2.aarch64 6.28.12504

4.14.154-128.181.amzn2.aarch64 6.28.12504

4.14.219-164.354.amzn2.x86_64 6.28.12504

4.14.246-187.474.amzn2.x86_64 6.28.12504

4.14.62-70.117.amzn2.x86_64 6.28.12504

4.14.225-168.357.amzn2.aarch64 6.28.12504

4.14.231-173.361.amzn2.x86_64 6.28.12504

4.14.192-147.314.amzn2.aarch64 6.28.12504

4.14.238-182.421.amzn2.aarch64 6.28.12504

4.14.186-146.268.amzn2.aarch64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 32/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.88-88.76.amzn2.aarch64 6.28.12504

4.14.51-66.38.amzn2.x86_64 6.28.12504

4.14.94-89.73.amzn2.aarch64 6.28.12504

4.14.209-160.335.amzn2.aarch64 6.28.12504

4.14.152-124.171.amzn2.x86_64 6.28.12504

4.14.248-189.473.amzn2.x86_64 6.30.12704

4.14.193-149.317.amzn2.aarch64 6.28.12504

4.14.231-173.360.amzn2.aarch64 6.28.12504

4.14.177-139.253.amzn2.aarch64 6.28.12504

4.14.114-103.97.amzn2.aarch64 6.28.12504

4.14.193-149.317.amzn2.x86_64 6.28.12504

4.14.146-119.123.amzn2.x86_64 6.28.12504

4.14.133-113.112.amzn2.x86_64 6.28.12504

4.14.238-182.422.amzn2.x86_64 6.28.12504

4.14.101-91.76.amzn2.x86_64 6.28.12504

4.14.88-88.73.amzn2.aarch64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 33/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.146-120.181.amzn2.aarch64 6.28.12504

4.14.77-86.82.amzn2.x86_64 6.28.12504

4.14.77-80.57.amzn2.x86_64 6.28.12504

4.14.158-129.185.amzn2.x86_64 6.28.12504

4.14.219-164.354.amzn2.aarch64 6.28.12504

4.14.143-118.123.amzn2.x86_64 6.28.12504

4.14.186-146.268.amzn2.x86_64 6.28.12504

4.14.104-95.84.amzn2.x86_64 6.28.12504

4.14.77-86.82.amzn2.aarch64 6.28.12504

4.14.70-72.55.amzn2.x86_64 6.28.12504

4.14.165-131.185.amzn2.x86_64 6.28.12504

4.14.181-142.260.amzn2.aarch64 6.28.12504

4.14.121-109.96.amzn2.x86_64 6.28.12504

4.14.262-200.489.amzn2.aarch64 6.37.13402

4.14.200-155.322.amzn2.x86_64 6.28.12504

4.14.128-112.105.amzn2.aarch64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 34/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.173-137.229.amzn2.aarch64 6.28.12504

4.14.276-211.499.amzn2.x86_64 6.30.12704

4.14.94-89.73.amzn2.x86_64 6.28.12504

4.14.177-139.253.amzn2.x86_64 6.28.12504

4.14.256-197.484.amzn2.x86_64 6.30.12704

4.14.88-88.76.amzn2.x86_64 6.28.12504

4.14.101-91.76.amzn2.aarch64 6.28.12504

4.14.77-81.59.amzn2.x86_64 6.28.12504

4.14.165-133.209.amzn2.x86_64 6.28.12504

4.14.177-139.254.amzn2.aarch64 6.28.12504

4.14.47-64.38.amzn2.x86_64 6.28.12504

4.14.209-160.335.amzn2.x86_64 6.28.12504

4.14.225-168.357.amzn2.x86_64 6.28.12504

4.14.143-118.123.amzn2.aarch64 6.28.12504

4.14.165-133.209.amzn2.aarch64 6.28.12504

4.14.133-113.105.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 35/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.146-119.123.amzn2.aarch64 6.28.12504

4.14.203-156.332.amzn2.x86_64 6.28.12504

4.14.231-173.361.amzn2.aarch64 6.28.12504

4.14.181-140.257.amzn2.x86_64 6.28.12504

4.14.252-195.483.amzn2.x86_64 6.30.12704

4.14.252-195.481.amzn2.aarch64 6.34.13108

4.14.252-195.481.amzn2.x86_64 6.30.12704

4.14.146-120.181.amzn2.x86_64 6.28.12504

4.14.262-200.489.amzn2.x86_64 6.30.12704

4.14.214-160.339.amzn2.aarch64 6.28.12504

4.14.232-176.381.amzn2.aarch64 6.28.12504

4.14.123-111.109.amzn2.x86_64 6.28.12504

4.14.268-205.500.amzn2.aarch64 6.37.13402

4.14.209-160.339.amzn2.aarch64 6.28.12504

4.14.114-103.97.amzn2.x86_64 6.28.12504

4.14.67-71.56.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 36/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.97-90.72.amzn2.x86_64 6.28.12504

4.14.109-99.92.amzn2.x86_64 6.28.12504

4.14.88-88.73.amzn2.x86_64 6.28.12504

4.14.171-136.231.amzn2.x86_64 6.28.12504

4.14.281-212.502.amzn2.x86_64 6.30.12704

4.14.138-114.102.amzn2.x86_64 6.28.12504

4.14.219-161.340.amzn2.aarch64 6.28.12504

4.14.192-147.314.amzn2.x86_64 6.28.12504

4.14.248-189.473.amzn2.aarch64 6.34.13108

4.14.133-113.105.amzn2.aarch64 6.28.12504

4.14.241-184.433.amzn2.x86_64 6.28.12504

4.14.152-124.171.amzn2.aarch64 6.28.12504

4.14.225-169.362.amzn2.x86_64 6.28.12504

amazon extras

Kernel Minimum sensor version Last supported sensor version

4.19.66-22.57.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 37/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.19.75-27.58.amzn2.x86_64 6.28.12504

4.19.72-25.58.amzn2.x86_64 6.28.12504

4.19.82-30.69.amzn2.aarch64 6.28.12504

4.19.75-27.58.amzn2.aarch64 6.28.12504

5.4.190-107.353.amzn2.x86_64 6.34.13109

4.19.84-33.70.amzn2.x86_64 6.28.12504

4.19.66-22.57.amzn2.aarch64 6.28.12504

4.19.58-21.57.amzn2.x86_64 6.28.12504

4.19.58-21.64.amzn2.x86_64 6.28.12504

4.19.82-30.69.amzn2.x86_64 6.28.12504

5.4.196-108.356.amzn2.x86_64 6.34.13109

4.19.75-28.73.amzn2.x86_64 6.28.12504

4.19.58-21.57.amzn2.aarch64 6.28.12504

4.19.58-21.64.amzn2.aarch64 6.28.12504

4.19.84-33.70.amzn2.aarch64 6.28.12504

4.19.75-28.73.amzn2.aarch64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 38/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.19.72-25.58.amzn2.aarch64 6.28.12504

amazon extras-5.10

Kernel Minimum sensor version Last supported sensor version

5.10.93-87.444.amzn2.x86_64 6.34.13109

5.10.50-44.131.amzn2.aarch64 6.34.13108

5.10.112-108.499.amzn2.x86_64 6.35.13206

5.10.59-52.142.amzn2.x86_64 6.30.12704

5.10.62-55.141.amzn2.aarch64 6.34.13108

5.10.102-99.473.amzn2.x86_64 6.35.13206

5.10.75-79.358.amzn2.aarch64 6.34.13108

5.10.29-27.126.amzn2.aarch64 6.34.13108

5.10.29-27.128.amzn2.x86_64 6.30.12704

5.10.82-83.359.amzn2.x86_64 6.34.13109

5.10.62-55.141.amzn2.x86_64 6.30.12704

5.10.47-39.130.amzn2.aarch64 6.34.13108

5.10.93-87.444.amzn2.aarch64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 39/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.10.35-31.135.amzn2.aarch64 6.34.13108

5.10.50-44.132.amzn2.x86_64 6.30.12704

5.10.96-90.460.amzn2.x86_64 6.34.13109

5.10.68-62.173.amzn2.aarch64 6.34.13108

5.10.50-44.131.amzn2.x86_64 6.30.12704

5.10.82-83.359.amzn2.aarch64 6.34.13108

5.10.68-62.173.amzn2.x86_64 6.30.12704

5.10.118-111.515.amzn2.x86_64 6.35.13206

5.10.29-27.126.amzn2.x86_64 6.30.12704

5.10.50-44.132.amzn2.aarch64 6.34.13108

5.10.96-90.460.amzn2.aarch64 6.37.13402

5.10.29-27.128.amzn2.aarch64 6.34.13108

5.10.102-99.473.amzn2.aarch64 6.37.13402

5.10.109-104.500.amzn2.x86_64 6.35.13206

5.10.75-79.358.amzn2.x86_64 6.32.12905

5.10.35-31.135.amzn2.x86_64 6.30.12704

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 40/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.10.59-52.142.amzn2.aarch64 6.34.13108

5.10.47-39.130.amzn2.x86_64 6.30.12704

amazon extras-5.4

Kernel Minimum sensor version Last supported sensor version

5.4.181-99.354.amzn2.aarch64 6.37.13402

5.4.46-23.77.amzn2.x86_64 6.28.12504

5.4.80-40.140.amzn2.x86_64 6.28.12504

5.4.46-19.75.amzn2.aarch64 6.28.12504

5.4.117-58.216.amzn2.x86_64 6.28.12504

5.4.110-54.182.amzn2.x86_64 6.28.12504

5.4.129-62.227.amzn2.aarch64 6.28.12504

5.4.129-63.229.amzn2.aarch64 6.28.12504

5.4.105-48.177.amzn2.aarch64 6.28.12504

5.4.144-69.257.amzn2.x86_64 6.28.12504

5.4.58-27.104.amzn2.x86_64 6.28.12504

5.4.68-34.125.amzn2.aarch64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 41/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.149-73.259.amzn2.x86_64 6.30.12704

5.4.176-91.338.amzn2.aarch64 6.37.13402

5.4.38-17.76.amzn2.x86_64 6.28.12504

5.4.156-83.273.amzn2.x86_64 6.30.12704

5.4.95-42.163.amzn2.x86_64 6.28.12504

5.4.68-34.125.amzn2.x86_64 6.28.12504

5.4.38-17.76.amzn2.aarch64 6.28.12504

5.4.176-91.338.amzn2.x86_64 6.34.13109

5.4.91-41.139.amzn2.aarch64 6.28.12504

5.4.141-67.229.amzn2.aarch64 6.37.13402

5.4.58-27.104.amzn2.aarch64 6.28.12504

5.4.172-90.336.amzn2.aarch64 6.37.13402

5.4.74-36.135.amzn2.x86_64 6.28.12504

5.4.172-90.336.amzn2.x86_64 6.34.13109

5.4.91-41.139.amzn2.x86_64 6.28.12504

5.4.129-63.229.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 42/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.46-19.75.amzn2.x86_64 6.28.12504

5.4.117-58.216.amzn2.aarch64 6.28.12504

5.4.162-86.275.amzn2.x86_64 6.30.12704

5.4.186-102.354.amzn2.x86_64 6.34.13109

5.4.181-99.354.amzn2.x86_64 6.34.13109

5.4.188-104.359.amzn2.x86_64 6.34.13109

5.4.162-86.275.amzn2.aarch64 6.37.13402

5.4.50-25.83.amzn2.x86_64 6.28.12504

5.4.50-25.83.amzn2.aarch64 6.28.12504

5.4.144-69.257.amzn2.aarch64 6.37.13402

5.4.110-54.182.amzn2.aarch64 6.28.12504

5.10.106-102.504.amzn2.x86_64 6.35.13206

5.4.74-36.135.amzn2.aarch64 6.28.12504

5.4.58-32.125.amzn2.aarch64 6.28.12504

5.4.129-62.227.amzn2.x86_64 6.28.12504

5.4.110-54.189.amzn2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 43/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.141-67.229.amzn2.x86_64 6.28.12504

5.4.20-12.75.amzn2.aarch64 6.28.12504

5.4.110-54.189.amzn2.aarch64 6.28.12504

5.4.95-42.163.amzn2.aarch64 6.28.12504

5.4.20-12.75.amzn2.x86_64 6.28.12504

5.4.156-83.273.amzn2.aarch64 6.37.13402

5.4.105-48.177.amzn2.x86_64 6.28.12504

5.4.46-23.77.amzn2.aarch64 6.28.12504

5.4.58-32.125.amzn2.x86_64 6.28.12504

5.4.149-73.259.amzn2.aarch64 6.37.13402

5.4.80-40.140.amzn2.aarch64 6.28.12504

debian 10.x

Kernel Minimum sensor version Last supported sensor version

4.19.0-1-cloud-amd64 6.28.12504

4.19.0-18-amd64 6.32.12904

4.19.0-13-cloud-amd64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 44/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.19.0-17-cloud-amd64 6.28.12504

4.19.0-6-amd64 6.28.12504

4.19.0-5-cloud-amd64 6.28.12504

4.19.0-5-amd64 6.28.12504

4.19.0-20-cloud-amd64 6.39.13601

4.19.0-9-amd64 6.28.12504

4.19.0-13-amd64 6.28.12504

4.19.0-11-cloud-amd64 6.28.12504

4.19.0-10-cloud-amd64 6.28.12504

4.19.0-3-amd64 6.28.12504

4.19.0-2-cloud-amd64 6.28.12504

4.19.0-9-cloud-amd64 6.28.12504

4.19.0-6-cloud-amd64 6.28.12504

4.19.0-10-amd64 6.28.12504

4.19.0-3-cloud-amd64 6.28.12504

4.19.0-7-cloud-amd64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 45/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.19.0-4-amd64 6.28.12504

4.19.0-17-amd64 6.28.12504

4.19.0-18-cloud-amd64 6.32.12904

4.19.0-19-cloud-amd64 6.38.13501

4.19.0-12-amd64 6.28.12504

4.19.0-16-cloud-amd64 6.28.12504

4.19.0-19-amd64 6.38.13501

4.19.0-15-cloud-amd64 6.28.12504

4.19.0-7-amd64 6.28.12504

4.19.0-8-amd64 6.28.12504

4.19.0-2-amd64 6.28.12504

4.19.0-14-cloud-amd64 6.28.12504

4.19.0-15-amd64 6.28.12504

4.19.0-12-cloud-amd64 6.28.12504

4.19.0-1-amd64 6.28.12504

4.19.0-20-amd64 6.39.13601

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 46/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.19.0-14-amd64 6.28.12504

4.19.0-16-amd64 6.28.12504

4.19.0-8-cloud-amd64 6.28.12504

4.19.0-4-cloud-amd64 6.28.12504

4.19.0-11-amd64 6.28.12504

debian 11.x

Kernel Minimum sensor version Last supported sensor version

5.10.0-8-cloud-amd64 6.34.13108

5.10.0-7-cloud-amd64 6.34.13108

5.10.0-3-amd64 6.34.13108

5.10.0-6-cloud-amd64 6.34.13108

5.10.0-9-amd64 6.34.13108

5.10.0-1-amd64 6.34.13108

5.10.0-11-cloud-amd64 6.37.13402

5.10.0-9-cloud-amd64 6.34.13108

5.10.0-2-cloud-amd64 6.34.13108

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 47/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.10.0-5-amd64 6.34.13108

5.10.0-11-amd64 6.34.13109

5.10.0-1-cloud-amd64 6.34.13108

5.10.0-4-cloud-amd64 6.34.13108

5.10.0-5-cloud-amd64 6.34.13108

5.10.0-13-amd64 6.39.13601

5.10.0-6-amd64 6.34.13108

5.10.0-3-cloud-amd64 6.34.13108

5.10.0-10-cloud-amd64 6.37.13402

5.10.0-8-amd64 6.34.13108

5.10.0-4-amd64 6.34.13108

5.10.0-2-amd64 6.34.13108

5.10.0-7-amd64 6.34.13108

5.10.0-12-cloud-amd64 6.37.13402

5.10.0-13-cloud-amd64 6.39.13601

5.10.0-10-amd64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 48/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.10.0-12-amd64 6.37.13402

debian 9.x

Kernel Minimum sensor version Last supported sensor version

4.9.0-14-amd64 6.28.12504

4.9.0-6-amd64 6.28.12504

4.9.0-3-amd64 6.28.12504

4.9.0-8-amd64 6.28.12504

4.9.0-11-amd64 6.28.12504

4.9.0-4-amd64 6.28.12504

4.9.0-7-amd64 6.28.12504

4.9.0-1-amd64 6.28.12504

4.9.0-9-amd64 6.28.12504

4.9.0-15-amd64 6.28.12504

4.9.0-2-amd64 6.28.12504

4.9.0-5-amd64 6.28.12504

4.9.0-13-amd64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 49/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.9.0-10-amd64 6.28.12504

4.9.0-16-amd64 6.28.12504

4.9.0-12-amd64 6.28.12504

4.9.0-18-amd64 6.38.13501

4.9.0-17-amd64 6.33.13005

elrepo 7

Kernel Minimum sensor version Last supported sensor version

5.4.91-1.el7.elrepo.x86_64 6.37.13402

5.4.172-1.el7.elrepo.x86_64 6.37.13402

5.4.193-1.el7.elrepo.x86_64 6.37.13402

5.4.155-1.el7.elrepo.x86_64 6.37.13402

5.4.176-1.el7.elrepo.x86_64 6.37.13402

5.4.120-1.el7.elrepo.x86_64 6.37.13402

5.4.157-1.el7.elrepo.x86_64 6.37.13402

5.4.187-1.el7.elrepo.x86_64 6.37.13402

5.4.97-1.el7.elrepo.x86_64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 50/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.102-1.el7.elrepo.x86_64 6.37.13402

5.4.142-1.el7.elrepo.x86_64 6.37.13402

5.4.110-1.el7.elrepo.x86_64 6.37.13402

5.4.153-1.el7.elrepo.x86_64 6.37.13402

5.4.90-1.el7.elrepo.x86_64 6.37.13402

5.4.171-1.el7.elrepo.x86_64 6.37.13402

5.4.190-1.el7.elrepo.x86_64 6.37.13402

5.4.95-1.el7.elrepo.x86_64 6.37.13402

5.4.166-1.el7.elrepo.x86_64 6.37.13402

5.4.149-1.el7.elrepo.x86_64 6.37.13402

5.4.163-1.el7.elrepo.x86_64 6.37.13402

5.4.175-1.el7.elrepo.x86_64 6.37.13402

5.4.141-1.el7.elrepo.x86_64 6.37.13402

5.4.128-1.el7.elrepo.x86_64 6.37.13402

5.4.184-1.el7.elrepo.x86_64 6.37.13402

5.4.124-1.el7.elrepo.x86_64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 51/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.99-1.el7.elrepo.x86_64 6.37.13402

5.4.162-1.el7.elrepo.x86_64 6.37.13402

5.4.191-1.el7.elrepo.x86_64 6.37.13402

5.4.127-1.el7.elrepo.x86_64 6.37.13402

5.4.182-1.el7.elrepo.x86_64 6.37.13402

5.4.186-1.el7.elrepo.x86_64 6.37.13402

5.4.111-1.el7.elrepo.x86_64 6.37.13402

5.4.173-1.el7.elrepo.x86_64 6.37.13402

5.4.118-1.el7.elrepo.x86_64 6.37.13402

5.4.140-1.el7.elrepo.x86_64 6.37.13402

5.4.138-1.el7.elrepo.x86_64 6.37.13402

5.4.168-1.el7.elrepo.x86_64 6.37.13402

5.4.98-1.el7.elrepo.x86_64 6.37.13402

5.4.201-1.el7.elrepo.x86_64 6.37.13402

5.4.89-1.el7.elrepo.x86_64 6.37.13402

5.4.129-1.el7.elrepo.x86_64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 52/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.144-1.el7.elrepo.x86_64 6.37.13402

5.4.113-1.el7.elrepo.x86_64 6.37.13402

5.4.106-1.el7.elrepo.x86_64 6.37.13402

5.4.160-1.el7.elrepo.x86_64 6.37.13402

5.4.167-1.el7.elrepo.x86_64 6.37.13402

5.4.96-1.el7.elrepo.x86_64 6.37.13402

5.4.198-1.el7.elrepo.x86_64 6.37.13402

5.4.189-1.el7.elrepo.x86_64 6.37.13402

5.4.117-1.el7.elrepo.x86_64 6.37.13402

5.4.192-1.el7.elrepo.x86_64 6.37.13402

5.4.197-1.el7.elrepo.x86_64 6.37.13402

5.4.195-1.el7.elrepo.x86_64 6.37.13402

5.4.194-1.el7.elrepo.x86_64 6.37.13402

5.4.87-1.el7.elrepo.x86_64 6.37.13402

5.4.116-1.el7.elrepo.x86_64 6.37.13402

5.4.105-1.el7.elrepo.x86_64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 53/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.104-1.el7.elrepo.x86_64 6.37.13402

5.4.115-1.el7.elrepo.x86_64 6.37.13402

5.4.94-1.el7.elrepo.x86_64 6.37.13402

5.4.156-1.el7.elrepo.x86_64 6.37.13402

5.4.177-1.el7.elrepo.x86_64 6.37.13402

5.4.121-1.el7.elrepo.x86_64 6.37.13402

5.4.145-1.el7.elrepo.x86_64 6.37.13402

5.4.88-1.el7.elrepo.x86_64 6.37.13402

5.4.174-1.el7.elrepo.x86_64 6.37.13402

5.4.125-1.el7.elrepo.x86_64 6.37.13402

5.4.169-1.el7.elrepo.x86_64 6.37.13402

5.4.93-1.el7.elrepo.x86_64 6.37.13402

5.4.107-1.el7.elrepo.x86_64 6.37.13402

5.4.152-1.el7.elrepo.x86_64 6.37.13402

5.4.178-1.el7.elrepo.x86_64 6.37.13402

5.4.170-1.el7.elrepo.x86_64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 54/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.86-1.el7.elrepo.x86_64 6.37.13402

5.4.114-1.el7.elrepo.x86_64 6.37.13402

5.4.131-1.el7.elrepo.x86_64 6.37.13402

5.4.130-1.el7.elrepo.x86_64 6.37.13402

5.4.151-1.el7.elrepo.x86_64 6.37.13402

5.4.147-1.el7.elrepo.x86_64 6.37.13402

5.4.148-1.el7.elrepo.x86_64 6.37.13402

5.4.103-1.el7.elrepo.x86_64 6.37.13402

5.4.181-1.el7.elrepo.x86_64 6.37.13402

5.4.196-1.el7.elrepo.x86_64 6.37.13402

5.4.188-1.el7.elrepo.x86_64 6.37.13402

5.4.161-1.el7.elrepo.x86_64 6.37.13402

5.4.112-1.el7.elrepo.x86_64 6.37.13402

5.4.185-1.el7.elrepo.x86_64 6.37.13402

5.4.136-1.el7.elrepo.x86_64 6.37.13402

5.4.146-1.el7.elrepo.x86_64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 55/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.101-1.el7.elrepo.x86_64 6.37.13402

5.4.109-1.el7.elrepo.x86_64 6.37.13402

5.4.92-1.el7.elrepo.x86_64 6.37.13402

5.4.134-1.el7.elrepo.x86_64 6.37.13402

5.4.179-1.el7.elrepo.x86_64 6.37.13402

5.4.158-1.el7.elrepo.x86_64 6.37.13402

5.4.159-1.el7.elrepo.x86_64 6.37.13402

5.4.180-1.el7.elrepo.x86_64 6.37.13402

5.4.164-1.el7.elrepo.x86_64 6.37.13402

5.4.154-1.el7.elrepo.x86_64 6.37.13402

5.4.100-1.el7.elrepo.x86_64 6.37.13402

5.4.132-1.el7.elrepo.x86_64 6.37.13402

5.4.123-1.el7.elrepo.x86_64 6.37.13402

5.4.200-1.el7.elrepo.x86_64 6.37.13402

5.4.150-1.el7.elrepo.x86_64 6.37.13402

5.4.135-1.el7.elrepo.x86_64 6.37.13402

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 56/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.137-1.el7.elrepo.x86_64 6.37.13402

5.4.143-1.el7.elrepo.x86_64 6.37.13402

5.4.119-1.el7.elrepo.x86_64 6.37.13402

5.4.183-1.el7.elrepo.x86_64 6.37.13402

5.4.139-1.el7.elrepo.x86_64 6.37.13402

5.4.126-1.el7.elrepo.x86_64 6.37.13402

5.4.133-1.el7.elrepo.x86_64 6.37.13402

5.4.108-1.el7.elrepo.x86_64 6.37.13402

oracle 6.x

Kernel Minimum sensor version Last supported sensor version

4.1.12-94.3.6.el6uek.x86_64 6.28.12504

4.1.12-124.56.1.el6uek.x86_64 6.28.12504

4.1.12-124.18.1.el6uek.x86_64 6.28.12504

3.8.13-98.2.1.el6uek.x86_64 6.29.12606

3.8.13-68.2.2.el6uek.x86_64 6.29.12606

3.8.13-118.14.2.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 57/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.20.7.el6uek.x86_64 6.29.12606

4.1.12-124.17.1.el6uek.x86_64 6.28.12504

4.1.12-124.20.3.el6uek.x86_64 6.28.12504

3.8.13-55.1.1.el6uek.x86_64 6.29.12606

3.8.13-118.3.1.el6uek.x86_64 6.29.12606

3.8.13-118.13.3.el6uek.x86_64 6.29.12606

4.1.12-94.3.4.el6uek.x86_64 6.28.12504

3.8.13-16.2.1.el6uek.x86_64 6.29.12606

4.1.12-37.6.3.el6uek.x86_64 6.28.12504

3.8.13-118.20.6.el6uek.x86_64 6.29.12606

4.1.12-112.14.5.el6uek.x86_64 6.28.12504

4.1.12-124.14.3.el6uek.x86_64 6.28.12504

3.8.13-98.1.2.el6uek.x86_64 6.29.12606

4.1.12-124.35.1.el6uek.x86_64 6.28.12504

3.8.13-98.4.1.el6uek.x86_64 6.29.12606

3.8.13-118.13.2.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 58/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-98.2.2.el6uek.x86_64 6.29.12606

4.1.12-124.30.1.el6uek.x86_64 6.28.12504

4.1.12-124.46.3.el6uek.x86_64 6.28.12504

4.1.12-61.1.6.el6uek.x86_64 6.28.12504

4.1.12-124.42.3.el6uek.x86_64 6.28.12504

4.1.12-124.48.6.el6uek.x86_64 6.28.12504

4.1.12-94.1.8.el6uek.x86_64 6.28.12504

3.8.13-118.6.2.el6uek.x86_64 6.29.12606

3.8.13-118.43.1.el6uek.x86_64 6.29.12606

4.1.12-94.3.7.el6uek.x86_64 6.28.12504

3.8.13-118.42.1.el6uek.x86_64 6.29.12606

4.1.12-61.51.1.el6uek.x86_64 6.28.12504

4.1.12-124.61.2.el6uek.x86_64 6.28.12504

3.8.13-118.34.1.el6uek.x86_64 6.29.12606

4.1.12-124.41.5.el6uek.x86_64 6.28.12504

4.1.12-94.2.1.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 59/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.20.2.el6uek.x86_64 6.29.12606

4.1.12-124.53.5.1.el6uek.x86_64 6.28.12504

4.1.12-124.28.6.el6uek.x86_64 6.28.12504

3.8.13-68.3.3.el6uek.x86_64 6.29.12606

4.1.12-112.14.13.el6uek.x86_64 6.28.12504

4.1.12-94.3.9.el6uek.x86_64 6.28.12504

3.8.13-16.2.2.el6uek.x86_64 6.29.12606

3.8.13-118.51.1.el6uek.x86_64 6.29.12606

3.8.13-35.el6uek.x86_64 6.29.12606

4.1.12-124.39.5.1.el6uek.x86_64 6.28.12504

3.8.13-98.7.1.el6uek.x86_64 6.29.12606

3.8.13-118.35.2.el6uek.x86_64 6.29.12606

4.1.12-37.2.1.el6uek.x86_64 6.28.12504

4.1.12-61.1.17.el6uek.x86_64 6.28.12504

4.1.12-112.14.1.el6uek.x86_64 6.28.12504

4.1.12-61.1.25.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 60/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-112.14.14.el6uek.x86_64 6.28.12504

3.8.13-98.6.1.el6uek.x86_64 6.29.12606

4.1.12-94.5.7.el6uek.x86_64 6.28.12504

4.1.12-124.27.1.el6uek.x86_64 6.28.12504

4.1.12-61.1.19.el6uek.x86_64 6.28.12504

3.8.13-68.3.1.el6uek.x86_64 6.29.12606

4.1.12-124.23.4.el6uek.x86_64 6.28.12504

3.8.13-118.15.2.el6uek.x86_64 6.29.12606

4.1.12-124.40.6.el6uek.x86_64 6.28.12504

3.8.13-118.24.1.el6uek.x86_64 6.29.12606

3.8.13-118.22.1.el6uek.x86_64 6.29.12606

4.1.12-124.53.3.1.el6uek.x86_64 6.28.12504

4.1.12-124.26.10.el6uek.x86_64 6.28.12504

4.1.12-124.25.1.el6uek.x86_64 6.28.12504

3.8.13-35.1.1.el6uek.x86_64 6.29.12606

3.8.13-26.2.2.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 61/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.19.4.el6uek.x86_64 6.28.12504

4.1.12-124.52.5.1.el6uek.x86_64 6.28.12504

4.1.12-37.6.2.el6uek.x86_64 6.28.12504

4.1.12-61.1.22.el6uek.x86_64 6.28.12504

4.1.12-112.17.3.el6uek.x86_64 6.28.12504

3.8.13-118.16.3.el6uek.x86_64 6.29.12606

3.8.13-98.el6uek.x86_64 6.29.12606

3.8.13-118.7.1.el6uek.x86_64 6.29.12606

4.1.12-112.16.4.el6uek.x86_64 6.28.12504

4.1.12-103.9.2.el6uek.x86_64 6.28.12504

3.8.13-16.1.1.el6uek.x86_64 6.29.12606

4.1.12-124.59.1.2.el6uek.x86_64 6.28.12504

4.1.12-61.1.14.el6uek.x86_64 6.28.12504

4.1.12-124.48.2.el6uek.x86_64 6.28.12504

4.1.12-124.22.1.el6uek.x86_64 6.28.12504

3.8.13-118.28.1.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 62/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-103.9.7.el6uek.x86_64 6.28.12504

3.8.13-55.1.2.el6uek.x86_64 6.29.12606

3.8.13-118.25.1.el6uek.x86_64 6.29.12606

4.1.12-61.1.23.el6uek.x86_64 6.28.12504

3.8.13-35.3.5.el6uek.x86_64 6.29.12606

4.1.12-124.39.2.el6uek.x86_64 6.28.12504

4.1.12-124.58.2.el6uek.x86_64 6.28.12504

3.8.13-118.51.2.el6uek.x86_64 6.29.12606

4.1.12-61.1.9.el6uek.x86_64 6.28.12504

3.8.13-118.26.1.el6uek.x86_64 6.29.12606

4.1.12-37.5.1.el6uek.x86_64 6.28.12504

4.1.12-32.2.1.el6uek.x86_64 6.28.12504

3.8.13-68.el6uek.x86_64 6.29.12606

4.1.12-124.39.5.el6uek.x86_64 6.28.12504

4.1.12-124.45.6.el6uek.x86_64 6.28.12504

4.1.12-124.39.2.1.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 63/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.23.1.el6uek.x86_64 6.29.12606

4.1.12-124.62.3.el6uek.x86_64 6.28.12504

3.8.13-118.16.2.el6uek.x86_64 6.29.12606

4.1.12-94.8.2.el6uek.x86_64 6.28.12504

3.8.13-118.19.2.el6uek.x86_64 6.29.12606

4.1.12-124.63.2.1.el6uek.x86_64 6.28.12504

4.1.12-37.2.2.el6uek.x86_64 6.28.12504

3.8.13-118.14.1.el6uek.x86_64 6.29.12606

3.8.13-68.3.4.el6uek.x86_64 6.29.12606

3.8.13-44.1.1.el6uek.x86_64 6.29.12606

3.8.13-35.1.3.el6uek.x86_64 6.29.12606

4.1.12-124.23.2.el6uek.x86_64 6.28.12504

4.1.12-124.52.5.el6uek.x86_64 6.28.12504

4.1.12-124.36.3.el6uek.x86_64 6.28.12504

3.8.13-118.31.1.el6uek.x86_64 6.29.12606

3.8.13-118.24.2.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 64/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.49.1.el6uek.x86_64 6.29.12606

4.1.12-124.49.3.1.el6uek.x86_64 6.28.12504

3.8.13-118.8.1.el6uek.x86_64 6.29.12606

3.8.13-118.9.2.el6uek.x86_64 6.29.12606

3.8.13-118.19.10.el6uek.x86_64 6.29.12606

4.1.12-124.37.1.el6uek.x86_64 6.28.12504

3.8.13-118.27.1.el6uek.x86_64 6.29.12606

4.1.12-124.18.6.el6uek.x86_64 6.28.12504

3.8.13-26.el6uek.x86_64 6.29.12606

3.8.13-118.18.4.el6uek.x86_64 6.29.12606

3.8.13-118.18.3.el6uek.x86_64 6.29.12606

4.1.12-124.29.4.1.el6uek.x86_64 6.28.12504

4.1.12-124.14.2.el6uek.x86_64 6.28.12504

4.1.12-124.46.4.1.el6uek.x86_64 6.28.12504

4.1.12-94.3.5.el6uek.x86_64 6.28.12504

3.8.13-118.20.1.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 65/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.47.3.el6uek.x86_64 6.28.12504

3.8.13-118.2.4.el6uek.x86_64 6.29.12606

4.1.12-94.3.8.el6uek.x86_64 6.28.12504

3.8.13-118.55.1.el6uek.x86_64 6.29.12606

4.1.12-124.53.5.el6uek.x86_64 6.28.12504

4.1.12-124.35.2.el6uek.x86_64 6.28.12504

3.8.13-118.35.1.el6uek.x86_64 6.29.12606

4.1.12-112.14.15.el6uek.x86_64 6.28.12504

4.1.12-112.16.7.el6uek.x86_64 6.28.12504

3.8.13-118.15.1.el6uek.x86_64 6.29.12606

4.1.12-124.26.12.el6uek.x86_64 6.28.12504

4.1.12-124.16.2.el6uek.x86_64 6.28.12504

4.1.12-112.14.10.el6uek.x86_64 6.28.12504

3.8.13-26.2.1.el6uek.x86_64 6.29.12606

3.8.13-55.1.5.el6uek.x86_64 6.29.12606

4.1.12-124.62.3.1.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 66/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.16.1.el6uek.x86_64 6.28.12504

4.1.12-124.19.1.el6uek.x86_64 6.28.12504

3.8.13-118.20.3.el6uek.x86_64 6.29.12606

4.1.12-103.7.1.el6uek.x86_64 6.28.12504

4.1.12-124.26.5.el6uek.x86_64 6.28.12504

3.8.13-118.2.5.el6uek.x86_64 6.29.12606

4.1.12-124.54.6.el6uek.x86_64 6.28.12504

4.1.12-124.18.9.el6uek.x86_64 6.28.12504

4.1.12-61.1.16.el6uek.x86_64 6.28.12504

4.1.12-124.48.5.el6uek.x86_64 6.28.12504

4.1.12-124.33.4.el6uek.x86_64 6.28.12504

4.1.12-32.el6uek.x86_64 6.28.12504

4.1.12-124.48.3.1.el6uek.x86_64 6.28.12504

4.1.12-124.28.3.el6uek.x86_64 6.28.12504

3.8.13-118.19.4.el6uek.x86_64 6.29.12606

3.8.13-118.16.4.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 67/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.28.1.el6uek.x86_64 6.28.12504

3.8.13-118.29.1.el6uek.x86_64 6.29.12606

3.8.13-118.39.1.el6uek.x86_64 6.29.12606

4.1.12-124.31.1.1.el6uek.x86_64 6.28.12504

4.1.12-124.34.1.el6uek.x86_64 6.28.12504

3.8.13-55.el6uek.x86_64 6.29.12606

3.8.13-35.1.2.el6uek.x86_64 6.29.12606

3.8.13-26.2.3.el6uek.x86_64 6.29.12606

4.1.12-124.24.5.el6uek.x86_64 6.28.12504

3.8.13-118.40.1.el6uek.x86_64 6.29.12606

3.8.13-118.37.1.el6uek.x86_64 6.29.12606

3.8.13-35.3.2.el6uek.x86_64 6.29.12606

3.8.13-118.10.2.el6uek.x86_64 6.29.12606

3.8.13-68.3.5.el6uek.x86_64 6.29.12606

3.8.13-118.24.3.el6uek.x86_64 6.29.12606

3.8.13-44.1.3.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 68/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-55.1.8.el6uek.x86_64 6.29.12606

4.1.12-61.1.27.el6uek.x86_64 6.28.12504

3.8.13-118.3.2.el6uek.x86_64 6.29.12606

3.8.13-98.5.2.el6uek.x86_64 6.29.12606

4.1.12-124.17.2.el6uek.x86_64 6.28.12504

3.8.13-118.52.1.el6uek.x86_64 6.29.12606

4.1.12-124.36.4.el6uek.x86_64 6.28.12504

4.1.12-94.8.3.el6uek.x86_64 6.28.12504

3.8.13-118.33.2.el6uek.x86_64 6.29.12606

3.8.13-118.4.1.el6uek.x86_64 6.29.12606

3.8.13-118.19.7.el6uek.x86_64 6.29.12606

4.1.12-103.7.3.el6uek.x86_64 6.28.12504

4.1.12-124.27.2.el6uek.x86_64 6.28.12504

4.1.12-103.3.8.el6uek.x86_64 6.28.12504

3.8.13-118.53.1.el6uek.x86_64 6.29.12606

3.8.13-44.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 69/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.14.1.el6uek.x86_64 6.28.12504

4.1.12-112.14.11.el6uek.x86_64 6.28.12504

4.1.12-103.7.4.el6uek.x86_64 6.28.12504

3.8.13-118.47.1.el6uek.x86_64 6.29.12606

4.1.12-124.24.1.el6uek.x86_64 6.28.12504

4.1.12-124.31.1.el6uek.x86_64 6.28.12504

3.8.13-118.9.1.el6uek.x86_64 6.29.12606

4.1.12-124.32.1.el6uek.x86_64 6.28.12504

4.1.12-124.57.1.el6uek.x86_64 6.28.12504

4.1.12-61.63.1.el6uek.x86_64 6.28.12504

4.1.12-124.15.4.el6uek.x86_64 6.28.12504

4.1.12-61.1.34.el6uek.x86_64 6.28.12504

4.1.12-124.20.1.el6uek.x86_64 6.28.12504

4.1.12-94.8.5.el6uek.x86_64 6.28.12504

4.1.12-103.9.4.el6uek.x86_64 6.28.12504

4.1.12-103.10.1.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 70/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.39.1.el6uek.x86_64 6.28.12504

4.1.12-61.64.1.el6uek.x86_64 6.28.12504

4.1.12-124.22.4.el6uek.x86_64 6.28.12504

4.1.12-61.1.28.el6uek.x86_64 6.28.12504

3.8.13-118.54.1.el6uek.x86_64 6.29.12606

4.1.12-124.19.2.el6uek.x86_64 6.28.12504

4.1.12-103.9.6.el6uek.x86_64 6.28.12504

4.1.12-32.2.3.el6uek.x86_64 6.28.12504

3.8.13-26.2.4.el6uek.x86_64 6.29.12606

4.1.12-124.14.5.el6uek.x86_64 6.28.12504

3.8.13-118.48.1.el6uek.x86_64 6.29.12606

3.8.13-118.41.1.el6uek.x86_64 6.29.12606

4.1.12-124.38.1.el6uek.x86_64 6.28.12504

4.1.12-61.1.13.el6uek.x86_64 6.28.12504

3.8.13-118.50.1.el6uek.x86_64 6.29.12606

4.1.12-124.29.3.1.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 71/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-98.1.1.el6uek.x86_64 6.29.12606

3.8.13-68.3.2.el6uek.x86_64 6.29.12606

4.1.12-124.32.3.el6uek.x86_64 6.28.12504

4.1.12-94.8.10.el6uek.x86_64 6.28.12504

3.8.13-118.11.2.el6uek.x86_64 6.29.12606

4.1.12-124.52.4.el6uek.x86_64 6.28.12504

4.1.12-124.36.1.el6uek.x86_64 6.28.12504

4.1.12-124.15.1.el6uek.x86_64 6.28.12504

3.8.13-68.1.2.el6uek.x86_64 6.29.12606

4.1.12-124.59.1.el6uek.x86_64 6.28.12504

4.1.12-61.1.33.el6uek.x86_64 6.28.12504

4.1.12-124.28.5.el6uek.x86_64 6.28.12504

4.1.12-103.3.8.1.el6uek.x86_64 6.28.12504

3.8.13-118.17.5.el6uek.x86_64 6.29.12606

4.1.12-124.21.1.el6uek.x86_64 6.28.12504

3.8.13-35.3.3.el6uek.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 72/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.el6uek.x86_64 6.29.12606

4.1.12-124.43.4.el6uek.x86_64 6.28.12504

3.8.13-118.45.1.el6uek.x86_64 6.29.12606

3.8.13-44.1.5.el6uek.x86_64 6.29.12606

3.8.13-16.3.1.el6uek.x86_64 6.29.12606

4.1.12-37.6.1.el6uek.x86_64 6.28.12504

4.1.12-124.16.4.el6uek.x86_64 6.28.12504

4.1.12-37.4.1.el6uek.x86_64 6.28.12504

3.8.13-118.18.2.el6uek.x86_64 6.29.12606

3.8.13-118.2.1.el6uek.x86_64 6.29.12606

4.1.12-94.8.4.el6uek.x86_64 6.28.12504

3.8.13-118.17.4.el6uek.x86_64 6.29.12606

4.1.12-124.54.6.1.el6uek.x86_64 6.28.12504

4.1.12-61.65.1.el6uek.x86_64 6.28.12504

3.8.13-118.46.1.el6uek.x86_64 6.29.12606

4.1.12-124.36.1.1.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 73/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.42.4.el6uek.x86_64 6.28.12504

3.8.13-118.47.2.el6uek.x86_64 6.29.12606

4.1.12-103.6.1.el6uek.x86_64 6.28.12504

4.1.12-124.19.6.el6uek.x86_64 6.28.12504

3.8.13-118.32.1.el6uek.x86_64 6.29.12606

3.8.13-35.3.4.el6uek.x86_64 6.29.12606

4.1.12-94.5.9.el6uek.x86_64 6.28.12504

3.8.13-118.21.4.el6uek.x86_64 6.29.12606

4.1.12-124.15.2.el6uek.x86_64 6.28.12504

3.8.13-68.2.2.2.el6uek.x86_64 6.29.12606

4.1.12-61.1.10.el6uek.x86_64 6.28.12504

4.1.12-124.19.7.el6uek.x86_64 6.28.12504

3.8.13-118.44.1.el6uek.x86_64 6.29.12606

3.8.13-118.2.2.el6uek.x86_64 6.29.12606

3.8.13-118.4.2.el6uek.x86_64 6.29.12606

4.1.12-124.60.1.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 74/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-94.7.8.el6uek.x86_64 6.28.12504

4.1.12-124.50.2.el6uek.x86_64 6.28.12504

4.1.12-124.53.5.2.el6uek.x86_64 6.28.12504

4.1.12-124.23.1.el6uek.x86_64 6.28.12504

4.1.12-124.41.4.el6uek.x86_64 6.28.12504

4.1.12-124.24.3.el6uek.x86_64 6.28.12504

4.1.12-124.51.2.el6uek.x86_64 6.28.12504

3.8.13-118.36.1.el6uek.x86_64 6.29.12606

3.8.13-118.21.1.el6uek.x86_64 6.29.12606

3.8.13-118.19.3.el6uek.x86_64 6.29.12606

4.1.12-32.1.2.el6uek.x86_64 6.28.12504

4.1.12-124.19.5.el6uek.x86_64 6.28.12504

4.1.12-124.44.4.el6uek.x86_64 6.28.12504

4.1.12-124.26.3.el6uek.x86_64 6.28.12504

4.1.12-124.20.7.el6uek.x86_64 6.28.12504

4.1.12-124.26.7.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 75/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.29.3.el6uek.x86_64 6.28.12504

3.8.13-118.38.1.el6uek.x86_64 6.29.12606

4.1.12-124.35.4.el6uek.x86_64 6.28.12504

4.1.12-61.47.1.el6uek.x86_64 6.28.12504

3.8.13-55.2.1.el6uek.x86_64 6.29.12606

3.8.13-118.6.1.el6uek.x86_64 6.29.12606

4.1.12-124.16.3.el6uek.x86_64 6.28.12504

4.1.12-124.22.2.el6uek.x86_64 6.28.12504

3.8.13-16.2.3.el6uek.x86_64 6.29.12606

4.1.12-124.32.3.2.el6uek.x86_64 6.28.12504

3.8.13-26.1.1.el6uek.x86_64 6.29.12606

3.8.13-16.el6uek.x86_64 6.29.12606

3.8.13-44.1.4.el6uek.x86_64 6.29.12606

4.1.12-124.45.2.el6uek.x86_64 6.28.12504

3.8.13-118.30.1.el6uek.x86_64 6.29.12606

4.1.12-112.14.2.el6uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 76/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-68.1.3.el6uek.x86_64 6.29.12606

4.1.12-37.3.1.el6uek.x86_64 6.28.12504

3.8.13-68.2.2.3.el6uek.x86_64 6.29.12606

4.1.12-124.18.5.el6uek.x86_64 6.28.12504

3.8.13-118.39.1.1.el6uek.x86_64 6.29.12606

4.1.12-124.40.6.3.el6uek.x86_64 6.28.12504

4.1.12-124.26.1.el6uek.x86_64 6.28.12504

3.8.13-118.19.12.el6uek.x86_64 6.29.12606

4.1.12-124.44.4.1.el6uek.x86_64 6.28.12504

oracle 7.x

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.36.1.el7uek.x86_64 6.28.12504

4.14.35-1844.0.7.el7uek.x86_64 6.28.12504

4.1.12-124.32.3.2.el7uek.x86_64 6.28.12504

3.8.13-118.26.1.el7uek.x86_64 6.28.12504

4.1.12-124.27.2.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 77/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-2047.509.2.2.el7uek.x86_64 6.28.12504

3.8.13-55.el7uek.x86_64 6.28.12504

4.1.12-124.26.5.el7uek.x86_64 6.28.12504

4.1.12-124.22.2.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.13.el7uek.x86_64 6.28.12504

4.1.12-37.2.2.el7uek.x86_64 6.28.12504

5.4.17-2136.301.1.4.el7uek.x86_64 6.28.12504

3.8.13-118.20.7.el7uek.x86_64 6.28.12504

4.14.35-1902.304.6.3.el7uek.x86_64 6.28.12504

4.14.35-1902.6.6.el7uek.x86_64 6.28.12504

4.14.35-1844.4.5.2.el7uek.x86_64 6.28.12504

4.1.12-94.2.1.el7uek.x86_64 6.28.12504

4.14.35-2047.504.2.el7uek.x86_64 6.28.12504

4.1.12-103.9.7.el7uek.x86_64 6.28.12504

3.8.13-118.32.1.el7uek.x86_64 6.28.12504

5.4.17-2136.302.7.2.3.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 78/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-1902.9.2.el7uek.x86_64 6.28.12504

5.4.17-2136.302.7.2.el7uek.x86_64 6.28.12504

3.8.13-118.19.4.el7uek.x86_64 6.28.12504

3.8.13-118.10.2.el7uek.x86_64 6.28.12504

4.14.35-2047.501.1.el7uek.x86_64 6.28.12504

4.14.35-2047.503.1.1.el7uek.x86_64 6.28.12504

4.1.12-94.3.7.el7uek.x86_64 6.28.12504

4.14.35-1902.302.2.el7uek.x86_64 6.28.12504

3.8.13-118.18.2.el7uek.x86_64 6.28.12504

3.8.13-68.3.5.el7uek.x86_64 6.28.12504

4.1.12-124.26.3.el7uek.x86_64 6.28.12504

4.14.35-1902.5.2.2.el7uek.x86_64 6.28.12504

4.1.12-124.48.2.el7uek.x86_64 6.28.12504

3.8.13-118.38.1.el7uek.x86_64 6.28.12504

3.8.13-118.50.1.el7uek.x86_64 6.28.12504

3.8.13-118.29.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 79/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.17-2036.102.0.2.el7uek.x86_64 6.28.12504

4.1.12-124.34.1.el7uek.x86_64 6.28.12504

4.14.35-1844.1.3.el7uek.x86_64 6.28.12504

4.1.12-112.14.2.el7uek.x86_64 6.28.12504

4.1.12-61.1.27.el7uek.x86_64 6.28.12504

4.1.12-94.5.7.el7uek.x86_64 6.28.12504

4.14.35-2047.508.3.3.el7uek.x86_64 6.28.12504

4.1.12-124.51.2.el7uek.x86_64 6.28.12504

4.1.12-124.18.1.el7uek.x86_64 6.28.12504

4.1.12-124.32.3.el7uek.x86_64 6.28.12504

4.1.12-124.26.10.el7uek.x86_64 6.28.12504

4.14.35-2047.501.2.el7uek.x86_64 6.28.12504

3.8.13-118.44.1.el7uek.x86_64 6.28.12504

4.1.12-103.7.4.el7uek.x86_64 6.28.12504

3.8.13-98.5.2.el7uek.x86_64 6.28.12504

4.1.12-32.2.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 80/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-2047.502.4.1.el7uek.x86_64 6.28.12504

4.1.12-94.3.6.el7uek.x86_64 6.28.12504

3.8.13-68.2.2.2.el7uek.x86_64 6.28.12504

4.14.35-1902.301.1.el7uek.x86_64 6.28.12504

4.1.12-61.63.1.el7uek.x86_64 6.28.12504

4.1.12-61.1.18.el7uek.x86_64 6.28.12504

3.8.13-55.1.8.el7uek.x86_64 6.28.12504

4.1.12-61.1.33.el7uek.x86_64 6.28.12504

4.14.35-2047.512.6.el7uek.x86_64 6.28.12504

4.1.12-124.24.1.el7uek.x86_64 6.28.12504

4.14.35-1902.2.0.el7uek.x86_64 6.28.12504

3.8.13-118.11.2.el7uek.x86_64 6.28.12504

3.8.13-118.24.3.el7uek.x86_64 6.28.12504

5.4.17-2102.200.13.el7uek.x86_64 6.28.12504

3.8.13-118.30.1.el7uek.x86_64 6.28.12504

4.1.12-124.39.5.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 81/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.8.1.el7uek.x86_64 6.28.12504

4.14.35-1902.305.4.el7uek.x86_64 6.28.12504

3.8.13-118.3.1.el7uek.x86_64 6.28.12504

4.1.12-94.5.9.el7uek.x86_64 6.28.12504

4.1.12-61.1.6.el7uek.x86_64 6.28.12504

4.1.12-61.1.34.el7uek.x86_64 6.28.12504

3.8.13-118.18.4.el7uek.x86_64 6.28.12504

4.14.35-1902.3.2.el7uek.x86_64 6.28.12504

4.1.12-124.23.1.el7uek.x86_64 6.28.12504

5.4.17-2102.206.1.el7uek.x86_64 6.28.12504

3.8.13-118.4.2.el7uek.x86_64 6.28.12504

4.1.12-124.40.6.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.8.el7uek.x86_64 6.28.12504

4.1.12-124.39.1.el7uek.x86_64 6.28.12504

4.14.35-1844.4.5.el7uek.x86_64 6.28.12504

5.4.17-2036.104.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 82/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-2047.502.4.el7uek.x86_64 6.28.12504

4.1.12-124.36.3.el7uek.x86_64 6.28.12504

4.1.12-124.41.4.el7uek.x86_64 6.28.12504

4.14.35-1818.3.3.el7uek.x86_64 6.28.12504

3.8.13-118.2.5.el7uek.x86_64 6.28.12504

4.14.35-1902.10.2.1.el7uek.x86_64 6.28.12504

4.1.12-124.22.1.el7uek.x86_64 6.28.12504

4.1.12-124.33.4.el7uek.x86_64 6.28.12504

4.1.12-103.9.2.el7uek.x86_64 6.28.12504

5.4.17-2011.4.6.el7uek.x86_64 6.28.12504

4.1.12-103.7.3.el7uek.x86_64 6.28.12504

4.14.35-2047.505.4.el7uek.x86_64 6.28.12504

4.1.12-112.14.13.el7uek.x86_64 6.28.12504

4.14.35-1902.5.1.4.el7uek.x86_64 6.28.12504

5.4.17-2102.202.5.el7uek.x86_64 6.28.12504

5.4.17-2102.204.4.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 83/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-94.8.5.el7uek.x86_64 6.28.12504

4.1.12-124.29.3.el7uek.x86_64 6.28.12504

4.14.35-1902.300.11.el7uek.x86_64 6.28.12504

3.8.13-118.19.7.el7uek.x86_64 6.28.12504

4.1.12-61.1.25.el7uek.x86_64 6.28.12504

3.8.13-68.2.2.el7uek.x86_64 6.28.12504

4.14.35-2047.513.2.1.el7uek.x86_64 6.35.13207

4.1.12-124.18.9.el7uek.x86_64 6.28.12504

5.4.17-2102.205.7.2.el7uek.x86_64 6.28.12504

4.1.12-94.8.4.el7uek.x86_64 6.28.12504

4.14.35-2047.510.5.2.el7uek.x86_64 6.28.12504

4.1.12-124.52.4.el7uek.x86_64 6.28.12504

3.8.13-118.9.2.el7uek.x86_64 6.28.12504

4.14.35-2047.500.9.3.el7uek.x86_64 6.28.12504

3.8.13-118.47.1.el7uek.x86_64 6.28.12504

4.1.12-124.26.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 84/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-94.3.5.el7uek.x86_64 6.28.12504

3.8.13-68.1.2.el7uek.x86_64 6.28.12504

3.8.13-118.47.2.el7uek.x86_64 6.28.12504

4.14.35-2047.510.5.5.el7uek.x86_64 6.28.12504

4.1.12-124.41.5.el7uek.x86_64 6.28.12504

4.14.35-2025.404.1.1.el7uek.x86_64 6.28.12504

3.8.13-118.45.1.el7uek.x86_64 6.28.12504

5.4.17-2136.307.3.4.el7uek.x86_64 6.35.13207

3.8.13-98.2.1.el7uek.x86_64 6.28.12504

4.1.12-103.9.4.el7uek.x86_64 6.28.12504

5.4.17-2036.103.3.el7uek.x86_64 6.28.12504

3.8.13-118.15.1.el7uek.x86_64 6.28.12504

4.1.12-124.15.4.el7uek.x86_64 6.28.12504

5.4.17-2136.304.4.5.el7uek.x86_64 6.28.12504

4.1.12-124.28.1.el7uek.x86_64 6.28.12504

4.14.35-1818.5.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 85/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.17-2136.305.5.5.el7uek.x86_64 6.35.13207

4.14.35-2047.500.10.el7uek.x86_64 6.28.12504

4.14.35-1902.5.2.el7uek.x86_64 6.28.12504

4.14.35-2047.502.5.el7uek.x86_64 6.28.12504

5.4.17-2102.203.6.el7uek.x86_64 6.28.12504

4.14.35-1844.5.3.el7uek.x86_64 6.28.12504

5.4.17-2011.3.2.1.el7uek.x86_64 6.28.12504

3.8.13-68.3.2.el7uek.x86_64 6.28.12504

3.8.13-118.25.1.el7uek.x86_64 6.28.12504

4.1.12-124.20.3.el7uek.x86_64 6.28.12504

4.1.12-112.17.3.el7uek.x86_64 6.28.12504

3.8.13-55.2.1.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.7.el7uek.x86_64 6.28.12504

4.1.12-124.19.2.el7uek.x86_64 6.28.12504

3.8.13-118.17.5.el7uek.x86_64 6.28.12504

4.1.12-37.2.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 86/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-61.1.19.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.3.el7uek.x86_64 6.28.12504

4.14.35-2047.508.3.1.el7uek.x86_64 6.28.12504

3.8.13-68.3.4.el7uek.x86_64 6.28.12504

4.14.35-2025.405.3.el7uek.x86_64 6.28.12504

5.4.17-2102.203.5.el7uek.x86_64 6.28.12504

4.14.35-1902.5.2.1.el7uek.x86_64 6.28.12504

3.8.13-68.3.1.el7uek.x86_64 6.28.12504

4.1.12-124.22.4.el7uek.x86_64 6.28.12504

4.1.12-61.1.24.el7uek.x86_64 6.28.12504

4.1.12-112.14.11.el7uek.x86_64 6.28.12504

3.8.13-98.7.1.el7uek.x86_64 6.28.12504

4.1.12-124.48.3.1.el7uek.x86_64 6.28.12504

4.1.12-124.53.5.el7uek.x86_64 6.28.12504

4.14.35-2047.500.9.1.el7uek.x86_64 6.28.12504

3.8.13-44.1.5.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 87/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.62.3.el7uek.x86_64 6.28.12504

4.1.12-124.21.1.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.8.el7uek.x86_64 6.28.12504

4.1.12-124.62.3.1.el7uek.x86_64 6.35.13207

5.4.17-2136.302.6.1.el7uek.x86_64 6.28.12504

4.1.12-103.7.1.el7uek.x86_64 6.28.12504

4.1.12-124.20.7.el7uek.x86_64 6.28.12504

3.8.13-55.1.5.el7uek.x86_64 6.28.12504

3.8.13-55.1.2.el7uek.x86_64 6.28.12504

4.1.12-124.44.4.el7uek.x86_64 6.28.12504

4.14.35-1818.1.6.el7uek.x86_64 6.28.12504

4.1.12-124.16.1.el7uek.x86_64 6.28.12504

5.4.17-2011.1.2.el7uek.x86_64 6.28.12504

3.8.13-118.51.2.el7uek.x86_64 6.28.12504

4.1.12-124.52.5.el7uek.x86_64 6.28.12504

4.1.12-124.19.6.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 88/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.24.3.el7uek.x86_64 6.28.12504

3.8.13-118.19.12.el7uek.x86_64 6.28.12504

4.1.12-124.61.2.el7uek.x86_64 6.28.12504

4.1.12-124.49.3.1.el7uek.x86_64 6.28.12504

4.1.12-94.7.8.el7uek.x86_64 6.28.12504

3.8.13-98.1.1.el7uek.x86_64 6.28.12504

4.1.12-124.42.3.el7uek.x86_64 6.28.12504

4.1.12-124.46.3.el7uek.x86_64 6.28.12504

4.14.35-1844.3.2.el7uek.x86_64 6.28.12504

4.1.12-124.52.5.1.el7uek.x86_64 6.28.12504

4.1.12-61.1.9.el7uek.x86_64 6.28.12504

4.1.12-61.1.14.el7uek.x86_64 6.28.12504

4.14.35-1902.305.4.1.el7uek.x86_64 6.28.12504

3.8.13-118.18.3.el7uek.x86_64 6.28.12504

4.1.12-61.1.22.el7uek.x86_64 6.28.12504

3.8.13-118.2.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 89/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-2025.403.3.el7uek.x86_64 6.28.12504

5.4.17-2011.5.3.el7uek.x86_64 6.28.12504

3.8.13-118.35.2.el7uek.x86_64 6.28.12504

4.1.12-124.47.3.el7uek.x86_64 6.28.12504

5.4.17-2011.4.4.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.4.el7uek.x86_64 6.28.12504

4.1.12-37.6.2.el7uek.x86_64 6.28.12504

5.4.17-2102.204.4.2.el7uek.x86_64 6.28.12504

4.1.12-124.53.5.1.el7uek.x86_64 6.28.12504

4.1.12-112.16.7.el7uek.x86_64 6.28.12504

5.4.17-2136.306.1.3.el7uek.x86_64 6.35.13207

3.8.13-118.31.1.el7uek.x86_64 6.28.12504

4.1.12-103.3.8.el7uek.x86_64 6.28.12504

4.1.12-124.58.2.el7uek.x86_64 6.28.12504

4.1.12-124.46.4.1.el7uek.x86_64 6.28.12504

4.14.35-2047.507.7.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 90/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-61.1.28.el7uek.x86_64 6.28.12504

4.1.12-124.30.1.el7uek.x86_64 6.28.12504

3.8.13-68.1.3.el7uek.x86_64 6.28.12504

3.8.13-98.2.2.el7uek.x86_64 6.28.12504

4.14.35-2047.508.3.2.el7uek.x86_64 6.28.12504

3.8.13-118.43.1.el7uek.x86_64 6.28.12504

4.1.12-61.1.17.el7uek.x86_64 6.28.12504

3.8.13-118.3.2.el7uek.x86_64 6.28.12504

4.1.12-94.8.2.el7uek.x86_64 6.28.12504

4.1.12-112.14.1.el7uek.x86_64 6.28.12504

4.1.12-103.9.6.el7uek.x86_64 6.28.12504

4.14.35-2047.513.2.3.el7uek.x86_64 6.28.12504

3.8.13-118.53.1.el7uek.x86_64 6.28.12504

4.1.12-124.25.1.el7uek.x86_64 6.28.12504

3.8.13-44.1.3.el7uek.x86_64 6.28.12504

4.1.12-124.26.12.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 91/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-2047.506.10.el7uek.x86_64 6.28.12504

4.1.12-103.6.1.el7uek.x86_64 6.28.12504

3.8.13-118.4.1.el7uek.x86_64 6.28.12504

4.1.12-61.1.23.el7uek.x86_64 6.28.12504

3.8.13-118.46.1.el7uek.x86_64 6.28.12504

4.14.35-1902.10.4.1.el7uek.x86_64 6.28.12504

3.8.13-55.1.6.el7uek.x86_64 6.28.12504

4.14.35-2047.514.5.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.1.el7uek.x86_64 6.28.12504

3.8.13-35.3.1.el7uek.x86_64 6.28.12504

4.14.35-1818.0.14.el7uek.x86_64 6.28.12504

4.1.12-124.16.2.el7uek.x86_64 6.28.12504

5.4.17-2136.302.7.2.2.el7uek.x86_64 6.28.12504

4.1.12-124.18.6.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.2.el7uek.x86_64 6.28.12504

4.1.12-124.36.1.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 92/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-103.10.1.el7uek.x86_64 6.28.12504

4.1.12-124.14.1.el7uek.x86_64 6.28.12504

4.14.35-1818.2.1.el7uek.x86_64 6.28.12504

4.14.35-1818.4.7.el7uek.x86_64 6.28.12504

4.1.12-112.14.5.el7uek.x86_64 6.28.12504

4.14.35-2047.503.1.el7uek.x86_64 6.28.12504

4.14.35-2047.507.7.6.el7uek.x86_64 6.28.12504

3.8.13-118.16.3.el7uek.x86_64 6.28.12504

4.14.35-2047.505.4.4.el7uek.x86_64 6.28.12504

4.1.12-112.16.4.el7uek.x86_64 6.28.12504

4.14.35-2047.506.8.el7uek.x86_64 6.28.12504

4.1.12-61.1.16.el7uek.x86_64 6.28.12504

4.1.12-124.20.1.el7uek.x86_64 6.28.12504

4.1.12-124.48.6.el7uek.x86_64 6.28.12504

3.8.13-118.42.1.el7uek.x86_64 6.28.12504

4.1.12-124.45.2.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 93/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.17-2136.301.1.3.el7uek.x86_64 6.28.12504

3.8.13-118.9.1.el7uek.x86_64 6.28.12504

4.1.12-112.14.14.el7uek.x86_64 6.28.12504

3.8.13-55.1.1.el7uek.x86_64 6.28.12504

4.1.12-61.65.1.el7uek.x86_64 6.28.12504

4.14.35-2025.400.8.el7uek.x86_64 6.28.12504

3.8.13-118.55.1.el7uek.x86_64 6.28.12504

5.4.17-2102.201.3.el7uek.x86_64 6.28.12504

4.1.12-124.28.3.el7uek.x86_64 6.28.12504

4.14.35-2047.509.2.3.el7uek.x86_64 6.28.12504

3.8.13-118.54.1.el7uek.x86_64 6.28.12504

4.14.35-1902.4.8.el7uek.x86_64 6.28.12504

4.1.12-94.1.8.el7uek.x86_64 6.28.12504

4.1.12-124.32.1.el7uek.x86_64 6.28.12504

4.1.12-124.19.5.el7uek.x86_64 6.28.12504

3.8.13-118.17.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 94/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-2047.510.5.3.el7uek.x86_64 6.28.12504

5.4.17-2036.100.6.1.el7uek.x86_64 6.28.12504

4.1.12-32.el7uek.x86_64 6.28.12504

3.8.13-68.3.3.el7uek.x86_64 6.28.12504

4.1.12-124.56.1.el7uek.x86_64 6.28.12504

4.14.35-2025.402.2.1.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.6.el7uek.x86_64 6.28.12504

4.14.35-1902.8.4.el7uek.x86_64 6.28.12504

5.4.17-2036.101.2.el7uek.x86_64 6.28.12504

4.1.12-94.3.4.el7uek.x86_64 6.28.12504

5.4.17-2136.304.4.4.el7uek.x86_64 6.28.12504

4.1.12-124.28.5.el7uek.x86_64 6.28.12504

3.8.13-118.6.1.el7uek.x86_64 6.28.12504

3.8.13-118.el7uek.x86_64 6.28.12504

5.4.17-2011.2.2.el7uek.x86_64 6.28.12504

3.8.13-35.3.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 95/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.20.3.el7uek.x86_64 6.28.12504

4.14.35-2047.505.4.2.el7uek.x86_64 6.28.12504

5.4.17-2136.307.3.2.el7uek.x86_64 6.35.13207

4.1.12-124.15.2.el7uek.x86_64 6.28.12504

4.1.12-124.37.1.el7uek.x86_64 6.28.12504

4.14.35-2047.513.2.2.el7uek.x86_64 6.35.13207

4.14.35-1902.10.7.el7uek.x86_64 6.28.12504

4.1.12-61.1.10.el7uek.x86_64 6.28.12504

3.8.13-118.33.2.el7uek.x86_64 6.28.12504

4.1.12-124.44.4.1.el7uek.x86_64 6.28.12504

4.1.12-124.23.2.el7uek.x86_64 6.28.12504

3.8.13-118.34.1.el7uek.x86_64 6.28.12504

4.1.12-103.3.8.1.el7uek.x86_64 6.28.12504

4.1.12-124.29.3.1.el7uek.x86_64 6.28.12504

5.4.17-2011.0.7.el7uek.x86_64 6.28.12504

4.1.12-124.23.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 96/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-1902.306.2.12.el7uek.x86_64 6.28.12504

4.14.35-2047.508.3.el7uek.x86_64 6.28.12504

4.14.35-1902.3.1.el7uek.x86_64 6.28.12504

4.1.12-124.43.4.el7uek.x86_64 6.28.12504

3.8.13-44.1.4.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.14.el7uek.x86_64 6.28.12504

3.8.13-118.49.1.el7uek.x86_64 6.28.12504

3.8.13-118.14.1.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.5.1.el7uek.x86_64 6.34.13109

3.8.13-118.39.1.1.el7uek.x86_64 6.28.12504

4.1.12-124.38.1.el7uek.x86_64 6.28.12504

3.8.13-118.15.3.el7uek.x86_64 6.28.12504

3.8.13-118.28.1.el7uek.x86_64 6.28.12504

4.1.12-94.3.8.el7uek.x86_64 6.28.12504

4.1.12-37.6.3.el7uek.x86_64 6.28.12504

4.1.12-124.35.4.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 97/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-32.2.3.el7uek.x86_64 6.28.12504

4.1.12-124.27.1.el7uek.x86_64 6.28.12504

4.14.35-2047.507.7.5.el7uek.x86_64 6.28.12504

3.8.13-118.14.2.el7uek.x86_64 6.28.12504

3.8.13-98.1.2.el7uek.x86_64 6.28.12504

3.8.13-118.37.1.el7uek.x86_64 6.28.12504

3.8.13-118.40.1.el7uek.x86_64 6.28.12504

4.14.35-2047.510.5.4.el7uek.x86_64 6.28.12504

4.14.35-1902.7.3.1.el7uek.x86_64 6.28.12504

4.1.12-37.6.1.el7uek.x86_64 6.28.12504

4.1.12-124.53.5.2.el7uek.x86_64 6.28.12504

4.1.12-124.17.1.el7uek.x86_64 6.28.12504

4.1.12-124.35.1.el7uek.x86_64 6.28.12504

4.1.12-124.36.1.el7uek.x86_64 6.28.12504

4.1.12-124.29.4.1.el7uek.x86_64 6.28.12504

4.14.35-1902.10.4.2.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 98/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.39.5.el7uek.x86_64 6.28.12504

5.4.17-2136.304.4.3.el7uek.x86_64 6.28.12504

3.8.13-118.48.1.el7uek.x86_64 6.28.12504

4.1.12-124.14.2.el7uek.x86_64 6.28.12504

4.14.35-1902.11.3.1.el7uek.x86_64 6.28.12504

4.14.35-2047.501.0.el7uek.x86_64 6.28.12504

4.1.12-124.42.4.el7uek.x86_64 6.28.12504

4.1.12-94.3.9.el7uek.x86_64 6.28.12504

4.1.12-124.39.2.el7uek.x86_64 6.28.12504

5.4.17-2102.204.4.3.el7uek.x86_64 6.28.12504

3.8.13-118.24.2.el7uek.x86_64 6.28.12504

4.14.35-2025.400.9.1.el7uek.x86_64 6.28.12504

4.1.12-124.63.2.1.el7uek.x86_64 6.28.12504

4.1.12-124.18.5.el7uek.x86_64 6.28.12504

4.1.12-124.48.5.el7uek.x86_64 6.28.12504

3.8.13-118.13.3.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 99/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.17-2136.304.4.1.el7uek.x86_64 6.28.12504

4.1.12-124.14.3.el7uek.x86_64 6.28.12504

5.4.17-2136.301.1.2.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.2.el7uek.x86_64 6.28.12504

4.1.12-61.64.1.el7uek.x86_64 6.28.12504

4.14.35-1902.10.8.el7uek.x86_64 6.28.12504

4.1.12-124.40.6.3.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.5.el7uek.x86_64 6.28.12504

4.1.12-124.24.5.el7uek.x86_64 6.28.12504

4.1.12-124.60.1.el7uek.x86_64 6.28.12504

4.1.12-124.50.2.el7uek.x86_64 6.28.12504

4.14.35-1902.10.4.el7uek.x86_64 6.28.12504

3.8.13-118.2.4.el7uek.x86_64 6.28.12504

4.14.35-2047.510.4.1.el7uek.x86_64 6.28.12504

4.1.12-37.4.1.el7uek.x86_64 6.28.12504

4.1.12-124.14.5.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 100/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.35.2.el7uek.x86_64 6.28.12504

4.1.12-124.53.3.1.el7uek.x86_64 6.28.12504

4.1.12-124.59.1.2.el7uek.x86_64 6.28.12504

3.8.13-118.6.2.el7uek.x86_64 6.28.12504

4.1.12-124.16.4.el7uek.x86_64 6.28.12504

4.14.35-2047.513.2.el7uek.x86_64 6.28.12504

4.14.35-2025.404.1.2.el7uek.x86_64 6.28.12504

4.14.35-1902.7.3.el7uek.x86_64 6.28.12504

5.4.17-2136.308.9.el7uek.x86_64 6.35.13207

4.1.12-37.5.1.el7uek.x86_64 6.28.12504

5.4.17-2136.308.7.el7uek.x86_64 6.35.13207

5.4.17-2136.307.3.1.el7uek.x86_64 6.35.13207

4.1.12-124.17.2.el7uek.x86_64 6.28.12504

3.8.13-118.27.1.el7uek.x86_64 6.28.12504

3.8.13-35.3.3.el7uek.x86_64 6.28.12504

5.4.17-2011.6.2.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 101/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.1.12-124.31.1.1.el7uek.x86_64 6.28.12504

4.1.12-61.1.13.el7uek.x86_64 6.28.12504

4.14.35-1902.11.3.el7uek.x86_64 6.28.12504

3.8.13-118.21.4.el7uek.x86_64 6.28.12504

4.1.12-124.36.4.el7uek.x86_64 6.28.12504

5.4.17-2036.104.5.el7uek.x86_64 6.28.12504

5.4.17-2136.307.3.6.el7uek.x86_64 6.35.13207

4.1.12-124.15.1.el7uek.x86_64 6.28.12504

4.14.35-1844.2.5.el7uek.x86_64 6.28.12504

4.1.12-37.3.1.el7uek.x86_64 6.28.12504

4.1.12-124.45.6.el7uek.x86_64 6.28.12504

4.14.35-1818.0.9.el7uek.x86_64 6.28.12504

3.8.13-44.1.1.el7uek.x86_64 6.28.12504

5.4.17-2136.307.3.5.el7uek.x86_64 6.35.13207

5.4.17-2136.304.4.2.el7uek.x86_64 6.28.12504

3.8.13-98.6.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 102/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.19.2.el7uek.x86_64 6.28.12504

4.14.35-1902.303.4.1.el7uek.x86_64 6.28.12504

3.8.13-68.el7uek.x86_64 6.28.12504

4.1.12-124.57.1.el7uek.x86_64 6.28.12504

4.14.35-2047.504.2.3.el7uek.x86_64 6.28.12504

3.8.13-118.39.1.el7uek.x86_64 6.28.12504

3.8.13-98.el7uek.x86_64 6.28.12504

4.1.12-124.19.7.el7uek.x86_64 6.28.12504

4.1.12-124.19.1.el7uek.x86_64 6.28.12504

4.14.35-2047.514.3.el7uek.x86_64 6.28.12504

3.8.13-98.4.1.el7uek.x86_64 6.28.12504

5.4.17-2011.7.4.el7uek.x86_64 6.28.12504

4.1.12-124.26.7.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.5.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.el7uek.x86_64 6.28.12504

3.8.13-118.19.10.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 103/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-1818.4.5.el7uek.x86_64 6.28.12504

4.1.12-124.19.4.el7uek.x86_64 6.28.12504

4.1.12-124.16.3.el7uek.x86_64 6.28.12504

4.1.12-124.54.6.el7uek.x86_64 6.28.12504

3.8.13-118.15.2.el7uek.x86_64 6.28.12504

5.4.17-2036.103.3.1.el7uek.x86_64 6.28.12504

4.1.12-124.28.6.el7uek.x86_64 6.28.12504

3.8.13-118.23.1.el7uek.x86_64 6.28.12504

4.14.35-1818.4.6.el7uek.x86_64 6.28.12504

3.8.13-118.22.1.el7uek.x86_64 6.28.12504

3.8.13-118.20.6.el7uek.x86_64 6.28.12504

3.8.13-35.3.2.el7uek.x86_64 6.28.12504

3.8.13-118.24.1.el7uek.x86_64 6.28.12504

4.1.12-61.51.1.el7uek.x86_64 6.28.12504

4.1.12-124.31.1.el7uek.x86_64 6.28.12504

3.8.13-118.41.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 104/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-2047.510.5.6.el7uek.x86_64 6.28.12504

3.8.13-118.16.2.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.4.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.7.el7uek.x86_64 6.28.12504

4.14.35-2047.511.5.5.3.el7uek.x86_64 6.28.12504

4.14.35-1902.5.1.5.el7uek.x86_64 6.28.12504

5.4.17-2136.302.7.2.1.el7uek.x86_64 6.28.12504

3.8.13-118.20.2.el7uek.x86_64 6.28.12504

4.1.12-124.54.6.1.el7uek.x86_64 6.28.12504

4.14.35-1902.303.5.3.el7uek.x86_64 6.28.12504

4.14.35-2047.505.4.3.el7uek.x86_64 6.28.12504

3.8.13-118.2.2.el7uek.x86_64 6.28.12504

3.8.13-118.52.1.el7uek.x86_64 6.28.12504

5.4.17-2136.300.7.el7uek.x86_64 6.28.12504

4.14.35-1902.0.18.el7uek.x86_64 6.28.12504

3.8.13-118.35.1.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 105/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.14.35-1902.304.6.4.el7uek.x86_64 6.28.12504

3.8.13-118.13.2.el7uek.x86_64 6.28.12504

4.1.12-124.39.2.1.el7uek.x86_64 6.28.12504

4.14.35-1902.304.6.el7uek.x86_64 6.28.12504

3.8.13-118.7.1.el7uek.x86_64 6.28.12504

5.4.17-2136.305.5.4.el7uek.x86_64 6.35.13207

3.8.13-68.2.2.3.el7uek.x86_64 6.28.12504

4.1.12-94.8.3.el7uek.x86_64 6.28.12504

5.4.17-2136.305.5.3.el7uek.x86_64 6.35.13207

4.14.35-2025.400.9.el7uek.x86_64 6.28.12504

3.8.13-118.19.3.el7uek.x86_64 6.28.12504

4.1.12-112.14.10.el7uek.x86_64 6.28.12504

4.14.35-1902.306.2.10.el7uek.x86_64 6.28.12504

4.1.12-32.1.2.el7uek.x86_64 6.28.12504

5.4.17-2102.205.7.3.el7uek.x86_64 6.28.12504

4.1.12-94.8.10.el7uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 106/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.8.13-118.20.1.el7uek.x86_64 6.28.12504

3.8.13-44.el7uek.x86_64 6.28.12504

3.8.13-118.21.1.el7uek.x86_64 6.28.12504

4.14.35-2025.401.4.el7uek.x86_64 6.28.12504

4.1.12-112.14.15.el7uek.x86_64 6.28.12504

3.8.13-118.16.4.el7uek.x86_64 6.28.12504

4.14.35-2047.506.8.1.el7uek.x86_64 6.28.12504

3.8.13-35.3.5.el7uek.x86_64 6.28.12504

oracle 8.x

Kernel Minimum sensor version Last supported sensor version

5.4.17-2136.307.3.5.el8uek.x86_64 6.35.13207

5.4.17-2011.7.4.el8uek.x86_64 6.28.12504

5.4.17-2036.104.4.el8uek.x86_64 6.28.12504

5.4.17-2136.307.3.6.el8uek.x86_64 6.35.13207

5.4.17-2136.304.4.2.el8uek.x86_64 6.35.13206

5.4.17-2036.103.3.1.el8uek.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 107/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.17-2102.205.7.3.el8uek.x86_64 6.30.12704

5.4.17-2102.203.5.el8uek.x86_64 6.28.12504

5.4.17-2136.300.7.el8uek.x86_64 6.31.12803

5.4.17-2136.308.9.el8uek.x86_64 6.35.13207

5.4.17-2136.304.4.1.el8uek.x86_64 6.35.13206

5.4.17-2036.101.2.el8uek.x86_64 6.28.12504

5.4.17-2011.5.3.el8uek.x86_64 6.28.12504

5.4.17-2136.307.3.4.el8uek.x86_64 6.35.13207

5.4.17-2136.301.1.3.el8uek.x86_64 6.32.12905

5.4.17-2136.302.7.2.2.el8uek.x86_64 6.34.13109

5.4.17-2102.204.4.2.el8uek.x86_64 6.28.12504

5.4.17-2102.200.13.el8uek.x86_64 6.28.12504

5.4.17-2011.3.2.1.el8uek.x86_64 6.28.12504

5.4.17-2102.204.4.4.el8uek.x86_64 6.28.12504

5.4.17-2136.307.3.1.el8uek.x86_64 6.35.13207

5.4.17-2102.206.1.el8uek.x86_64 6.31.12803

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 108/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.17-2136.302.7.2.3.el8uek.x86_64 6.34.13109

5.4.17-2136.305.5.5.el8uek.x86_64 6.35.13207

5.4.17-2136.304.4.5.el8uek.x86_64 6.35.13206

5.4.17-2102.202.5.el8uek.x86_64 6.28.12504

5.4.17-2136.301.1.4.el8uek.x86_64 6.32.12905

5.4.17-2136.302.7.2.el8uek.x86_64 6.34.13108

5.4.17-2011.2.2.el8uek.x86_64 6.28.12504

5.4.17-2136.304.4.4.el8uek.x86_64 6.35.13206

5.4.17-2102.203.6.el8uek.x86_64 6.28.12504

5.4.17-2011.4.4.el8uek.x86_64 6.28.12504

5.4.17-2136.306.1.3.el8uek.x86_64 6.35.13207

5.4.17-2136.305.5.4.el8uek.x86_64 6.35.13207

5.4.17-2102.204.4.3.el8uek.x86_64 6.28.12504

5.4.17-2136.305.5.3.el8uek.x86_64 6.35.13207

5.4.17-2136.302.6.1.el8uek.x86_64 6.34.13108

5.4.17-2136.308.7.el8uek.x86_64 6.35.13207

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 109/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.17-2136.301.1.2.el8uek.x86_64 6.32.12905

5.4.17-2136.304.4.3.el8uek.x86_64 6.35.13206

5.4.17-2102.201.3.el8uek.x86_64 6.28.12504

5.4.17-2136.307.3.2.el8uek.x86_64 6.35.13207

5.4.17-2011.6.2.el8uek.x86_64 6.28.12504

5.4.17-2036.102.0.2.el8uek.x86_64 6.28.12504

5.4.17-2036.103.3.el8uek.x86_64 6.28.12504

5.4.17-2102.205.7.2.el8uek.x86_64 6.30.12704

5.4.17-2036.100.6.1.el8uek.x86_64 6.28.12504

5.4.17-2011.1.2.el8uek.x86_64 6.28.12504

5.4.17-2036.104.5.el8uek.x86_64 6.28.12504

5.4.17-2011.4.6.el8uek.x86_64 6.28.12504

5.4.17-2011.0.7.el8uek.x86_64 6.28.12504

5.4.17-2136.302.7.2.1.el8uek.x86_64 6.34.13108

redhat 6.10

Kernel Minimum sensor version Last supported sensor version

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 110/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-754.41.2.el6.x86_64 6.28.12504

2.6.32-754.43.1.el6.x86_64 6.28.12504

2.6.32-754.14.2.el6.x86_64 6.28.12504

2.6.32-754.36.1.el6.x86_64 6.28.12504

2.6.32-754.22.1.el6.x86_64 6.28.12504

2.6.32-754.33.1.el6.x86_64 6.28.12504

2.6.32-754.35.1.el6.x86_64 6.28.12504

2.6.32-754.12.1.el6.x86_64 6.28.12504

2.6.32-754.28.1.el6.x86_64 6.28.12504

2.6.32-754.10.1.el6.x86_64 6.28.12504

2.6.32-754.6.3.el6.x86_64 6.28.12504

2.6.32-754.18.2.el6.x86_64 6.28.12504

2.6.32-754.29.1.el6.x86_64 6.28.12504

2.6.32-754.24.3.el6.x86_64 6.28.12504

2.6.32-754.47.1.el6.x86_64 6.28.12504

2.6.32-754.35.1.0.5.el6.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 111/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-754.39.1.el6.x86_64 6.28.12504

2.6.32-754.3.5.el6.x86_64 6.28.12504

2.6.32-754.31.1.el6.x86_64 6.28.12504

2.6.32-754.15.3.el6.x86_64 6.28.12504

2.6.32-754.2.1.el6.x86_64 6.28.12504

2.6.32-754.29.2.el6.x86_64 6.28.12504

2.6.32-754.25.1.el6.x86_64 6.28.12504

2.6.32-754.17.1.el6.x86_64 6.28.12504

2.6.32-754.11.1.el6.x86_64 6.28.12504

2.6.32-754.23.1.el6.x86_64 6.28.12504

2.6.32-754.30.2.el6.x86_64 6.28.12504

2.6.32-754.27.1.el6.x86_64 6.28.12504

2.6.32-754.9.1.el6.x86_64 6.28.12504

2.6.32-754.el6.x86_64 6.28.12504

2.6.32-754.24.2.el6.x86_64 6.28.12504

redhat 6.5

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 112/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-431.23.3.el6.x86_64 6.30.12704

2.6.32-431.20.5.el6.x86_64 6.30.12704

2.6.32-431.66.1.el6.x86_64 6.30.12704

2.6.32-431.64.1.el6.x86_64 6.30.12704

2.6.32-431.56.1.el6.x86_64 6.30.12704

2.6.32-431.46.2.el6.x86_64 6.30.12704

2.6.32-431.61.2.el6.x86_64 6.30.12704

2.6.32-431.3.1.el6.x86_64 6.30.12704

2.6.32-431.el6.x86_64 6.30.12704

2.6.32-431.11.2.el6.x86_64 6.30.12704

2.6.32-431.5.1.el6.x86_64 6.30.12704

2.6.32-431.53.2.el6.x86_64 6.30.12704

2.6.32-431.1.2.el6.x86_64 6.30.12704

2.6.32-431.1.2.0.1.el6.x86_64 6.30.12704

2.6.32-431.29.2.el6.x86_64 6.30.12704

2.6.32-431.17.1.el6.x86_64 6.30.12704

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 113/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-431.40.2.el6.x86_64 6.30.12704

2.6.32-431.59.1.el6.x86_64 6.30.12704

2.6.32-431.37.1.el6.x86_64 6.30.12704

2.6.32-431.20.3.el6.x86_64 6.30.12704

2.6.32-431.50.1.el6.x86_64 6.30.12704

2.6.32-431.40.1.el6.x86_64 6.30.12704

redhat 6.6

Kernel Minimum sensor version Last supported sensor version

2.6.32-504.33.2.el6.x86_64 6.30.12704

2.6.32-504.52.1.el6.x86_64 6.30.12704

2.6.32-504.40.1.el6.x86_64 6.30.12704

2.6.32-504.12.2.el6.x86_64 6.30.12704

2.6.32-504.49.1.el6.x86_64 6.30.12704

2.6.32-504.8.1.el6.x86_64 6.30.12704

2.6.32-504.16.2.el6.x86_64 6.30.12704

2.6.32-504.36.1.el6.x86_64 6.30.12704

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 114/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-504.54.1.el6.x86_64 6.30.12704

2.6.32-504.3.3.el6.x86_64 6.30.12704

2.6.32-504.el6.x86_64 6.30.12704

2.6.32-504.50.1.el6.x86_64 6.30.12704

2.6.32-504.51.1.el6.x86_64 6.30.12704

2.6.32-504.1.3.el6.x86_64 6.30.12704

2.6.32-504.23.4.el6.x86_64 6.30.12704

2.6.32-504.30.3.el6.x86_64 6.30.12704

2.6.32-504.46.1.el6.x86_64 6.30.12704

2.6.32-504.43.1.el6.x86_64 6.30.12704

2.6.32-504.38.1.el6.x86_64 6.30.12704

redhat 6.7

Kernel Minimum sensor version Last supported sensor version

2.6.32-573.45.1.el6.x86_64 6.28.12504

2.6.32-573.51.1.el6.x86_64 6.28.12504

2.6.32-573.45.2.el6.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 115/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-573.7.1.el6.x86_64 6.28.12504

2.6.32-573.49.1.el6.x86_64 6.28.12504

2.6.32-573.60.1.el6.x86_64 6.28.12504

2.6.32-573.1.1.el6.x86_64 6.28.12504

2.6.32-573.55.4.el6.x86_64 6.28.12504

2.6.32-573.30.1.el6.x86_64 6.28.12504

2.6.32-573.34.1.el6.x86_64 6.28.12504

2.6.32-573.8.1.el6.x86_64 6.28.12504

2.6.32-573.43.3.el6.x86_64 6.28.12504

2.6.32-573.35.1.el6.x86_64 6.28.12504

2.6.32-573.55.2.el6.x86_64 6.28.12504

2.6.32-573.12.1.el6.x86_64 6.28.12504

2.6.32-573.40.1.el6.x86_64 6.28.12504

2.6.32-573.65.2.el6.x86_64 6.28.12504

2.6.32-573.60.4.el6.x86_64 6.28.12504

2.6.32-573.49.3.el6.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 116/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-573.35.2.el6.x86_64 6.28.12504

2.6.32-573.41.1.el6.x86_64 6.28.12504

2.6.32-573.22.1.el6.x86_64 6.28.12504

2.6.32-573.38.1.el6.x86_64 6.28.12504

2.6.32-573.47.1.el6.x86_64 6.28.12504

2.6.32-573.42.2.el6.x86_64 6.28.12504

2.6.32-573.el6.x86_64 6.28.12504

2.6.32-573.18.1.el6.x86_64 6.28.12504

2.6.32-573.26.1.el6.x86_64 6.28.12504

2.6.32-573.42.1.el6.x86_64 6.28.12504

2.6.32-573.43.2.el6.x86_64 6.28.12504

2.6.32-573.62.1.el6.x86_64 6.28.12504

2.6.32-573.53.1.el6.x86_64 6.28.12504

2.6.32-573.32.1.el6.x86_64 6.28.12504

2.6.32-573.37.1.el6.x86_64 6.28.12504

2.6.32-573.3.1.el6.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 117/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-573.59.1.el6.x86_64 6.28.12504

2.6.32-573.48.1.el6.x86_64 6.28.12504

redhat 6.8

Kernel Minimum sensor version Last supported sensor version

2.6.32-642.1.1.el6.x86_64 6.28.12504

2.6.32-642.13.2.el6.x86_64 6.28.12504

2.6.32-642.el6.x86_64 6.28.12504

2.6.32-642.3.1.el6.x86_64 6.28.12504

2.6.32-642.6.2.el6.x86_64 6.28.12504

2.6.32-642.15.1.el6.x86_64 6.28.12504

2.6.32-642.4.2.el6.x86_64 6.28.12504

2.6.32-642.6.1.el6.x86_64 6.28.12504

2.6.32-642.11.1.el6.x86_64 6.28.12504

2.6.32-642.13.1.el6.x86_64 6.28.12504

redhat 6.9

Kernel Minimum sensor version Last supported sensor version

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 118/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

2.6.32-696.23.1.el6.x86_64 6.28.12504

2.6.32-696.6.3.el6.x86_64 6.28.12504

2.6.32-696.20.1.el6.x86_64 6.28.12504

2.6.32-696.16.1.el6.x86_64 6.28.12504

2.6.32-696.el6.x86_64 6.28.12504

2.6.32-696.3.1.el6.x86_64 6.28.12504

2.6.32-696.10.1.el6.x86_64 6.28.12504

2.6.32-696.10.3.el6.x86_64 6.28.12504

2.6.32-696.3.2.el6.x86_64 6.28.12504

2.6.32-696.1.1.el6.x86_64 6.28.12504

2.6.32-696.30.1.el6.x86_64 6.28.12504

2.6.32-696.28.1.el6.x86_64 6.28.12504

2.6.32-696.18.7.el6.x86_64 6.28.12504

2.6.32-696.10.2.el6.x86_64 6.28.12504

2.6.32-696.13.2.el6.x86_64 6.28.12504

redhat 7.1

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 119/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-229.11.1.el7.x86_64 6.29.12606

3.10.0-229.28.1.el7.x86_64 6.29.12606

3.10.0-229.34.1.el7.x86_64 6.29.12606

3.10.0-229.1.2.el7.x86_64 6.29.12606

3.10.0-229.4.2.el7.x86_64 6.29.12606

3.10.0-229.42.2.el7.x86_64 6.29.12606

3.10.0-229.7.2.el7.x86_64 6.29.12606

3.10.0-229.49.1.el7.x86_64 6.29.12606

3.10.0-229.20.1.el7.x86_64 6.29.12606

3.10.0-229.48.1.el7.x86_64 6.29.12606

3.10.0-229.44.1.el7.x86_64 6.29.12606

3.10.0-229.40.1.el7.x86_64 6.29.12606

3.10.0-229.el7.x86_64 6.29.12606

3.10.0-229.24.2.el7.x86_64 6.29.12606

3.10.0-229.46.1.el7.x86_64 6.29.12606

3.10.0-229.14.1.el7.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 120/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-229.26.2.el7.x86_64 6.29.12606

3.10.0-229.42.1.el7.x86_64 6.29.12606

3.10.0-229.30.1.el7.x86_64 6.29.12606

3.10.0-229.38.1.el7.x86_64 6.29.12606

redhat 7.2

Kernel Minimum sensor version Last supported sensor version

3.10.0-327.46.1.el7.x86_64 6.29.12606

3.10.0-327.53.1.el7.x86_64 6.29.12606

3.10.0-327.36.1.el7.x86_64 6.29.12606

3.10.0-327.41.4.el7.x86_64 6.29.12606

3.10.0-327.4.5.el7.x86_64 6.29.12606

3.10.0-327.49.2.el7.x86_64 6.29.12606

3.10.0-327.55.3.el7.x86_64 6.29.12606

3.10.0-327.59.3.el7.x86_64 6.29.12606

3.10.0-327.3.1.el7.x86_64 6.29.12606

3.10.0-327.4.4.el7.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 121/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-327.22.2.el7.x86_64 6.29.12606

3.10.0-327.36.2.el7.x86_64 6.29.12606

3.10.0-327.55.2.el7.x86_64 6.29.12606

3.10.0-327.13.1.el7.x86_64 6.29.12606

3.10.0-327.28.3.el7.x86_64 6.29.12606

3.10.0-327.55.1.el7.x86_64 6.29.12606

3.10.0-327.61.3.el7.x86_64 6.29.12606

3.10.0-327.36.3.el7.x86_64 6.29.12606

3.10.0-327.58.1.el7.x86_64 6.29.12606

3.10.0-327.62.1.el7.x86_64 6.29.12606

3.10.0-327.18.2.el7.x86_64 6.29.12606

3.10.0-327.el7.x86_64 6.29.12606

3.10.0-327.44.2.el7.x86_64 6.29.12606

3.10.0-327.59.1.el7.x86_64 6.29.12606

3.10.0-327.59.2.el7.x86_64 6.29.12606

3.10.0-327.41.3.el7.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 122/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-327.10.1.el7.x86_64 6.29.12606

3.10.0-327.28.2.el7.x86_64 6.29.12606

redhat 7.3

Kernel Minimum sensor version Last supported sensor version

3.10.0-514.28.1.el7.x86_64 6.29.12606

3.10.0-514.36.5.el7.x86_64 6.29.12606

3.10.0-514.58.1.el7.x86_64 6.29.12606

3.10.0-514.44.1.el7.x86_64 6.29.12606

3.10.0-514.el7.x86_64 6.29.12606

3.10.0-514.21.1.el7.x86_64 6.29.12606

3.10.0-514.32.2.el7.x86_64 6.29.12606

3.10.0-514.6.2.el7.x86_64 6.29.12606

3.10.0-514.48.1.el7.x86_64 6.29.12606

3.10.0-514.26.2.el7.x86_64 6.29.12606

3.10.0-514.32.3.el7.x86_64 6.29.12606

3.10.0-514.6.1.el7.x86_64 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 123/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-514.41.1.el7.x86_64 6.29.12606

3.10.0-514.26.1.el7.x86_64 6.29.12606

3.10.0-514.48.5.el7.x86_64 6.29.12606

3.10.0-514.51.1.el7.x86_64 6.29.12606

3.10.0-514.16.1.el7.x86_64 6.29.12606

3.10.0-514.53.1.el7.x86_64 6.29.12606

3.10.0-514.10.2.el7.x86_64 6.29.12606

3.10.0-514.35.1.el7.x86_64 6.29.12606

3.10.0-514.28.2.el7.x86_64 6.29.12606

3.10.0-514.21.2.el7.x86_64 6.29.12606

3.10.0-514.61.1.el7.x86_64 6.29.12606

3.10.0-514.48.3.el7.x86_64 6.29.12606

3.10.0-514.36.1.el7.x86_64 6.29.12606

3.10.0-514.55.4.el7.x86_64 6.29.12606

3.10.0-514.2.2.el7.x86_64 6.29.12606

redhat 7.4

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 124/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-693.1.1.el7.x86_64 6.28.12504

3.10.0-693.46.1.el7.x86_64 6.28.12504

3.10.0-693.el7.x86_64 6.28.12504

3.10.0-693.44.1.el7.x86_64 6.28.12504

3.10.0-693.43.1.el7.x86_64 6.28.12504

3.10.0-693.11.6.el7.x86_64 6.28.12504

3.10.0-693.11.1.el7.x86_64 6.28.12504

3.10.0-693.17.1.el7.x86_64 6.28.12504

3.10.0-693.5.2.el7.x86_64 6.28.12504

3.10.0-693.39.1.el7.x86_64 6.28.12504

3.10.0-693.25.4.el7.x86_64 6.28.12504

3.10.0-693.65.1.el7.x86_64 6.28.12504

3.10.0-693.58.1.el7.x86_64 6.28.12504

3.10.0-693.55.1.el7.x86_64 6.28.12504

3.10.0-693.2.1.el7.x86_64 6.28.12504

3.10.0-693.33.1.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 125/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-693.35.1.el7.x86_64 6.28.12504

3.10.0-693.37.4.el7.x86_64 6.28.12504

3.10.0-693.2.2.el7.x86_64 6.28.12504

3.10.0-693.25.2.el7.x86_64 6.28.12504

3.10.0-693.50.3.el7.x86_64 6.28.12504

3.10.0-693.21.1.el7.x86_64 6.28.12504

3.10.0-693.47.2.el7.x86_64 6.28.12504

3.10.0-693.25.7.el7.x86_64 6.28.12504

redhat 7.5

Kernel Minimum sensor version Last supported sensor version

3.10.0-862.29.1.el7.x86_64 6.28.12504

3.10.0-862.3.3.el7.x86_64 6.28.12504

3.10.0-862.11.6.el7.x86_64 6.28.12504

3.10.0-862.2.3.el7.x86_64 6.28.12504

3.10.0-862.46.1.el7.x86_64 6.28.12504

3.10.0-862.20.2.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 126/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-862.51.1.el7.x86_64 6.28.12504

3.10.0-862.32.2.el7.x86_64 6.28.12504

3.10.0-862.34.2.el7.x86_64 6.28.12504

3.10.0-862.48.1.el7.x86_64 6.28.12504

3.10.0-862.3.2.el7.x86_64 6.28.12504

3.10.0-862.25.3.el7.x86_64 6.28.12504

3.10.0-862.14.4.el7.x86_64 6.28.12504

3.10.0-862.41.2.el7.x86_64 6.28.12504

3.10.0-862.34.1.el7.x86_64 6.28.12504

3.10.0-862.6.3.el7.x86_64 6.28.12504

3.10.0-862.27.1.el7.x86_64 6.28.12504

3.10.0-862.43.2.el7.x86_64 6.28.12504

3.10.0-862.43.1.el7.x86_64 6.28.12504

3.10.0-862.44.2.el7.x86_64 6.28.12504

3.10.0-862.32.1.el7.x86_64 6.28.12504

3.10.0-862.43.3.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 127/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-862.el7.x86_64 6.28.12504

3.10.0-862.9.1.el7.x86_64 6.28.12504

3.10.0-862.37.1.el7.x86_64 6.28.12504

3.10.0-862.41.1.el7.x86_64 6.28.12504

redhat 7.6

Kernel Minimum sensor version Last supported sensor version

3.10.0-957.62.1.el7.x86_64 6.28.12504

3.10.0-957.94.1.el7.x86_64 6.28.12504

3.10.0-957.92.1.el7.x86_64 6.28.12504

3.10.0-957.38.1.el7.x86_64 6.28.12504

3.10.0-957.21.3.el7.x86_64 6.28.12504

3.10.0-957.35.2.el7.x86_64 6.28.12504

3.10.0-957.38.3.el7.x86_64 6.28.12504

3.10.0-957.65.1.el7.x86_64 6.28.12504

3.10.0-957.12.1.el7.x86_64 6.28.12504

3.10.0-957.54.1.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 128/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-957.41.1.el7.x86_64 6.28.12504

3.10.0-957.12.2.el7.x86_64 6.28.12504

3.10.0-957.86.1.el7.x86_64 6.28.12504

3.10.0-957.61.1.el7.x86_64 6.28.12504

3.10.0-957.43.1.el7.x86_64 6.28.12504

3.10.0-957.1.3.el7.x86_64 6.28.12504

3.10.0-957.72.1.el7.x86_64 6.28.12504

3.10.0-957.61.2.el7.x86_64 6.28.12504

3.10.0-957.21.2.el7.x86_64 6.28.12504

3.10.0-957.88.1.el7.x86_64 6.28.12504

3.10.0-957.70.1.el7.x86_64 6.28.12504

3.10.0-957.38.2.el7.x86_64 6.28.12504

3.10.0-957.10.1.el7.x86_64 6.28.12504

3.10.0-957.48.1.el7.x86_64 6.28.12504

3.10.0-957.5.1.el7.x86_64 6.28.12504

3.10.0-957.66.1.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 129/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-957.58.2.el7.x86_64 6.28.12504

3.10.0-957.35.1.el7.x86_64 6.28.12504

3.10.0-957.46.1.el7.x86_64 6.28.12504

3.10.0-957.el7.x86_64 6.28.12504

3.10.0-957.56.1.el7.x86_64 6.28.12504

3.10.0-957.27.4.el7.x86_64 6.28.12504

3.10.0-957.27.2.el7.x86_64 6.28.12504

redhat 7.7

Kernel Minimum sensor version Last supported sensor version

3.10.0-1062.37.1.el7.x86_64 6.28.12504

3.10.0-1062.66.1.el7.x86_64 6.28.12504

3.10.0-1062.4.1.el7.x86_64 6.28.12504

3.10.0-1062.26.1.el7.x86_64 6.28.12504

3.10.0-1062.45.1.el7.x86_64 6.28.12504

3.10.0-1062.4.3.el7.x86_64 6.28.12504

3.10.0-1062.31.2.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 130/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-1062.21.1.el7.x86_64 6.28.12504

3.10.0-1062.el7.x86_64 6.28.12504

3.10.0-1062.12.1.el7.x86_64 6.28.12504

3.10.0-1062.52.2.el7.x86_64 6.28.12504

3.10.0-1062.9.1.el7.x86_64 6.28.12504

3.10.0-1062.4.2.el7.x86_64 6.28.12504

3.10.0-1062.31.3.el7.x86_64 6.28.12504

3.10.0-1062.30.1.el7.x86_64 6.28.12504

3.10.0-1062.43.1.el7.x86_64 6.28.12504

3.10.0-1062.18.1.el7.x86_64 6.28.12504

3.10.0-1062.46.1.el7.x86_64 6.28.12504

3.10.0-1062.1.1.el7.x86_64 6.28.12504

3.10.0-1062.7.1.el7.x86_64 6.28.12504

3.10.0-1062.51.1.el7.x86_64 6.28.12504

3.10.0-1062.36.1.el7.x86_64 6.28.12504

3.10.0-1062.40.1.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 131/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-1062.1.2.el7.x86_64 6.28.12504

3.10.0-1062.33.1.el7.x86_64 6.28.12504

3.10.0-1062.49.1.el7.x86_64 6.28.12504

redhat 7.8

Kernel Minimum sensor version Last supported sensor version

3.10.0-1127.el7.x86_64 6.28.12504

3.10.0-1127.8.2.el7.x86_64 6.28.12504

3.10.0-1127.13.1.el7.x86_64 6.28.12504

3.10.0-1127.18.2.el7.x86_64 6.28.12504

3.10.0-1127.19.1.el7.x86_64 6.28.12504

3.10.0-1127.10.1.el7.x86_64 6.28.12504

redhat 7.9

Kernel Minimum sensor version Last supported sensor version

3.10.0-1160.2.2.el7.x86_64 6.28.12504

3.10.0-1160.49.1.el7.x86_64 6.28.12504

3.10.0-1160.25.1.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 132/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.10.0-1160.45.1.el7.x86_64 6.28.12504

3.10.0-1160.36.2.el7.x86_64 6.28.12504

3.10.0-1160.62.1.el7.x86_64 6.28.12504

3.10.0-1160.6.1.el7.x86_64 6.28.12504

3.10.0-1160.21.1.el7.x86_64 6.28.12504

3.10.0-1160.66.1.el7.x86_64 6.28.12504

3.10.0-1160.24.1.el7.x86_64 6.28.12504

3.10.0-1160.31.1.el7.x86_64 6.28.12504

3.10.0-1160.2.1.el7.x86_64 6.28.12504

3.10.0-1160.59.1.el7.x86_64 6.28.12504

3.10.0-1160.42.2.el7.x86_64 6.28.12504

3.10.0-1160.11.1.el7.x86_64 6.28.12504

3.10.0-1160.15.2.el7.x86_64 6.28.12504

3.10.0-1160.41.1.el7.x86_64 6.28.12504

3.10.0-1160.el7.x86_64 6.28.12504

3.10.0-1160.53.1.el7.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 133/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

redhat 8

Kernel Minimum sensor version Last supported sensor version

4.18.0-80.11.2.el8_0.x86_64 6.28.12504

4.18.0-80.7.1.el8_0.x86_64 6.28.12504

4.18.0-80.11.1.el8_0.x86_64 6.28.12504

4.18.0-80.el8.x86_64 6.28.12504

4.18.0-80.1.2.el8_0.x86_64 6.28.12504

4.18.0-80.7.2.el8_0.x86_64 6.28.12504

4.18.0-80.4.2.el8_0.x86_64 6.28.12504

redhat 8.1

Kernel Minimum sensor version Last supported sensor version

4.18.0-147.0.2.el8_1.x86_64 6.28.12504

4.18.0-147.64.1.el8_1.x86_64 6.28.12504

4.18.0-147.43.1.el8_1.x86_64 6.28.12504

4.18.0-147.54.2.el8_1.x86_64 6.28.12504

4.18.0-147.52.1.el8_1.x86_64 6.28.12504

4.18.0-147.58.1.el8_1.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 134/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.18.0-147.24.2.el8_1.x86_64 6.28.12504

4.18.0-147.59.1.el8_1.x86_64 6.28.12504

4.18.0-147.27.1.el8_1.x86_64 6.28.12504

4.18.0-147.el8.x86_64 6.28.12504

4.18.0-147.57.1.el8_1.x86_64 6.28.12504

4.18.0-147.13.2.el8_1.x86_64 6.28.12504

4.18.0-147.8.1.el8_1.x86_64 6.28.12504

4.18.0-147.51.2.el8_1.x86_64 6.28.12504

4.18.0-147.65.1.el8_1.x86_64 6.28.12504

4.18.0-147.48.1.el8_1.x86_64 6.28.12504

4.18.0-147.3.1.el8_1.x86_64 6.28.12504

4.18.0-147.38.1.el8_1.x86_64 6.28.12504

4.18.0-147.34.1.el8_1.x86_64 6.28.12504

4.18.0-147.20.1.el8_1.x86_64 6.28.12504

4.18.0-147.56.1.el8_1.x86_64 6.28.12504

4.18.0-147.5.1.el8_1.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 135/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.18.0-147.0.3.el8_1.x86_64 6.28.12504

4.18.0-147.51.1.el8_1.x86_64 6.28.12504

4.18.0-147.44.1.el8_1.x86_64 6.28.12504

4.18.0-147.32.1.el8_1.x86_64 6.28.12504

redhat 8.2

Kernel Minimum sensor version Last supported sensor version

4.18.0-193.41.1.el8_2.x86_64 6.28.12504

4.18.0-193.46.1.el8_2.x86_64 6.28.12504

4.18.0-193.1.2.el8_2.x86_64 6.28.12504

4.18.0-193.70.1.el8_2.x86_64 6.28.12504

4.18.0-193.80.1.el8_2.x86_64 6.28.12504

4.18.0-193.14.3.el8_2.x86_64 6.28.12504

4.18.0-193.el8.x86_64 6.28.12504

4.18.0-193.56.1.el8_2.x86_64 6.28.12504

4.18.0-193.65.2.el8_2.x86_64 6.28.12504

4.18.0-193.13.2.el8_2.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 136/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.18.0-193.75.1.el8_2.x86_64 6.28.12504

4.18.0-193.6.3.el8_2.x86_64 6.28.12504

4.18.0-193.64.1.el8_2.x86_64 6.28.12504

4.18.0-193.29.1.el8_2.x86_64 6.28.12504

4.18.0-193.37.1.el8_2.x86_64 6.28.12504

4.18.0-193.47.1.el8_2.x86_64 6.28.12504

4.18.0-193.28.1.el8_2.x86_64 6.28.12504

4.18.0-193.79.1.el8_2.x86_64 6.28.12504

4.18.0-193.68.1.el8_2.x86_64 6.28.12504

4.18.0-193.51.1.el8_2.x86_64 6.28.12504

4.18.0-193.81.1.el8_2.x86_64 6.28.12504

4.18.0-193.60.2.el8_2.x86_64 6.28.12504

4.18.0-193.19.1.el8_2.x86_64 6.28.12504

4.18.0-193.71.1.el8_2.x86_64 6.28.12504

4.18.0-193.40.1.el8_2.x86_64 6.28.12504

redhat 8.3

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 137/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.18.0-240.22.1.el8_3.x86_64 6.28.12504

4.18.0-240.8.1.el8_3.x86_64 6.28.12504

4.18.0-240.1.1.el8_3.x86_64 6.28.12504

4.18.0-240.23.2.el8_3.x86_64 6.28.12504

4.18.0-240.10.1.el8_3.x86_64 6.28.12504

4.18.0-240.15.1.el8_3.x86_64 6.28.12504

4.18.0-240.el8.x86_64 6.28.12504

redhat 8.4

Kernel Minimum sensor version Last supported sensor version

4.18.0-305.19.1.el8_4.x86_64 6.28.12504

4.18.0-305.49.1.el8_4.x86_64 6.35.13206

4.18.0-305.25.1.el8_4.x86_64 6.28.12504

4.18.0-305.28.1.el8_4.x86_64 6.28.12504

4.18.0-305.34.2.el8_4.x86_64 6.28.12504

4.18.0-305.3.1.el8_4.x86_64 6.28.12504

4.18.0-305.3.1.el8.x86_64 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 138/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.18.0-305.el8.x86_64 6.28.12504

4.18.0-305.30.1.el8_4.x86_64 6.28.12504

4.18.0-305.17.1.el8_4.x86_64 6.28.12504

4.18.0-305.40.2.el8_4.x86_64 6.28.12504

4.18.0-305.40.1.el8_4.x86_64 6.28.12504

4.18.0-305.45.1.el8_4.x86_64 6.35.13206

4.18.0-305.7.1.el8_4.x86_64 6.28.12504

4.18.0-305.12.1.el8_4.x86_64 6.28.12504

4.18.0-305.10.2.el8_4.x86_64 6.28.12504

redhat 8.5

Kernel Minimum sensor version Last supported sensor version

4.18.0-348.20.1.el8_5.x86_64 6.33.13005

4.18.0-348.el8.x86_64 6.33.13003

4.18.0-348.12.2.el8_5.x86_64 6.33.13005

4.18.0-348.2.1.el8_5.x86_64 6.33.13005

4.18.0-348.7.1.el8_5.x86_64 6.33.13005

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 139/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.18.0-348.23.1.el8_5.x86_64 6.33.13005

suse sles11-sp4

Kernel Minimum sensor version Last supported sensor version

3.0.101-108.129-default 6.28.12504

3.0.101-108.7-default 6.28.12504

3.0.101-108.35-default 6.28.12504

3.0.101-108.95-default 6.28.12504

3.0.101-108.132-default 6.28.12504

3.0.101-108.60-default 6.28.12504

3.0.101-108.108-default 6.28.12504

3.0.101-108.13-default 6.28.12504

3.0.101-108.63-default 6.28.12504

3.0.101-108.41-default 6.28.12504

3.0.101-108.117-default 6.28.12504

3.0.101-108.77-default 6.28.12504

3.0.101-108.68-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 140/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.0.101-108.71-default 6.28.12504

3.0.101-108.48-default 6.28.12504

3.0.101-108.52-default 6.28.12504

3.0.101-108.126-default 6.28.12504

3.0.101-108.101-default 6.28.12504

3.0.101-108.38-default 6.28.12504

3.0.101-108.84-default 6.28.12504

3.0.101-108.87-xen 6.34.13108

3.0.101-108.135-default 6.28.12504

3.0.101-108.90-default 6.28.12504

3.0.101-108.98-default 6.28.12504

3.0.101-108.74-default 6.28.12504

3.0.101-108.111-default 6.28.12504

3.0.101-108.21-default 6.28.12504

3.0.101-108.114-default 6.28.12504

3.0.101-108.87-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 141/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.0.101-108.123-default 6.28.12504

3.0.101-108.18-default 6.28.12504

3.0.101-108.120-default 6.28.12504

3.0.101-108.10-default 6.28.12504

3.0.101-108.57-default 6.28.12504

3.0.101-108.81-default 6.28.12504

3.0.101-107-default 6.28.12504

suse sles12-sp2

Kernel Minimum sensor version Last supported sensor version

4.4.59-92.24-default 6.28.12504

4.4.49-92.11-default 6.28.12504

4.4.90-92.45-default 6.28.12504

4.4.114-92.64-default 6.28.12504

4.4.121-92.109-default 6.28.12504

4.4.121-92.120-default 6.28.12504

4.4.121-92.114-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 142/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.121-92.101-default 6.28.12504

4.4.90-92.50-default 6.28.12504

4.4.121-92.95-default 6.28.12504

4.4.121-92.129-default 6.28.12504

4.4.21-81-default 6.28.12504

4.4.121-92.73-default 6.28.12504

4.4.103-92.56-default 6.28.12504

4.4.121-92.141-default 6.28.12504

4.4.121-92.152-default 6.28.12504

4.4.21-69-default 6.28.12504

4.4.121-92.135-default 6.28.12504

4.4.74-92.35-default 6.28.12504

4.4.121-92.92-default 6.28.12504

4.4.38-93-default 6.28.12504

4.4.121-92.80-default 6.28.12504

4.4.59-92.17-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 143/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.114-92.67-default 6.28.12504

4.4.121-92.149-default 6.28.12504

4.4.121-92.98-default 6.28.12504

4.4.103-92.53-default 6.28.12504

4.4.49-92.14-default 6.28.12504

4.4.21-90-default 6.28.12504

4.4.74-92.32-default 6.28.12504

4.4.121-92.117-default 6.28.12504

4.4.74-92.29-default 6.28.12504

4.4.59-92.20-default 6.28.12504

4.4.21-84-default 6.28.12504

4.4.121-92.146-default 6.28.12504

4.4.74-92.38-default 6.28.12504

4.4.121-92.125-default 6.28.12504

4.4.121-92.138-default 6.28.12504

4.4.121-92.104-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 144/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.120-92.70-default 6.28.12504

4.4.121-92.85-default 6.28.12504

suse sles12-sp3

Kernel Minimum sensor version Last supported sensor version

4.4.180-94.124-default 6.28.12504

4.4.180-94.121-default 6.28.12504

4.4.156-94.57-default 6.28.12504

4.4.180-94.107-default 6.28.12504

4.4.180-94.100-default 6.28.12504

4.4.140-94.42-default 6.28.12504

4.4.180-94.127-default 6.28.12504

4.4.180-94.113-default 6.28.12504

4.4.180-94.141-default 6.28.12504

4.4.156-94.64-default 6.28.12504

4.4.176-94.88-default 6.28.12504

4.4.180-94.150-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 145/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.180-94.103-default 6.28.12504

4.4.180-94.156-default 6.28.12504

4.4.180-94.135-default 6.28.12504

4.4.82-6.6-default 6.28.12504

4.4.180-94.138-default 6.28.12504

4.4.82-6.3-default 6.28.12504

4.4.180-94.153-default 6.28.12504

4.4.114-94.11-default 6.28.12504

4.4.92-6.18-default 6.28.12504

4.4.180-94.97-default 6.28.12504

4.4.120-94.17-default 6.28.12504

4.4.162-94.69-default 6.28.12504

4.4.103-6.38-default 6.28.12504

4.4.138-94.39-default 6.28.12504

4.4.103-6.33-default 6.28.12504

4.4.175-94.79-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 146/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.73-5-default 6.28.12504

4.4.156-94.61-default 6.28.12504

4.4.126-94.22-default 6.28.12504

4.4.180-94.161-default 6.28.12504

4.4.155-94.50-default 6.28.12504

4.4.82-6.9-default 6.28.12504

4.4.180-94.144-default 6.28.12504

4.4.180-94.130-default 6.28.12504

4.4.131-94.29-default 6.28.12504

4.4.180-94.147-default 6.28.12504

4.4.180-94.116-default 6.28.12504

4.4.178-94.91-default 6.28.12504

4.4.92-6.30-default 6.28.12504

4.4.132-94.33-default 6.28.12504

4.4.162-94.72-default 6.28.12504

4.4.114-94.14-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 147/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.143-94.47-default 6.28.12504

suse sles12-sp4

Kernel Minimum sensor version Last supported sensor version

4.12.14-95.19-default 6.28.12504

4.12.14-95.54-default 6.28.12504

4.12.14-95.13-default 6.28.12504

4.12.14-95.57-default 6.28.12504

4.12.14-95.45-default 6.28.12504

4.12.14-95.60-default 6.28.12504

4.12.14-95.96-default 6.28.12504

4.12.14-95.48-default 6.28.12504

4.12.14-95.74-default 6.28.12504

4.12.14-95.65-default 6.28.12504

4.12.14-95.16-default 6.28.12504

4.12.14-95.32-default 6.28.12504

4.12.14-95.93-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 148/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.12.14-95.80-default 6.28.12504

4.12.14-95.6-default 6.28.12504

4.12.14-95.24-default 6.28.12504

4.12.14-95.71-default 6.28.12504

4.12.14-95.83-default 6.28.12504

4.12.14-95.37-default 6.28.12504

4.12.14-95.29-default 6.28.12504

4.12.14-95.68-default 6.28.12504

4.12.14-94.41-default 6.28.12504

4.12.14-95.51-default 6.28.12504

4.12.14-95.40-default 6.28.12504

4.12.14-95.77-default 6.28.12504

4.12.14-95.88-default 6.28.12504

4.12.14-95.3-default 6.28.12504

suse sles12-sp5

Kernel Minimum sensor version Last supported sensor version

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 149/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.12.14-122.113-default 6.32.12905

4.12.14-122.46-default 6.28.12504

4.12.14-122.88-default 6.28.12504

4.12.14-122.54-default 6.28.12504

4.12.14-122.41-default 6.28.12504

4.12.14-122.71-default 6.28.12504

4.12.14-122.26-default 6.28.12504

4.12.14-122.106-default 6.32.12905

4.12.14-122.23-default 6.28.12504

4.12.14-120-default 6.28.12504

4.12.14-122.51-default 6.28.12504

4.12.14-122.103-default 6.32.12905

4.12.14-122.80-default 6.28.12504

4.12.14-122.74-default 6.28.12504

4.12.14-122.91-default 6.28.12504

4.12.14-122.121-default 6.32.12905

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 150/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.12.14-122.12-default 6.28.12504

4.12.14-122.29-default 6.28.12504

4.12.14-122.77-default 6.28.12504

4.12.14-122.63-default 6.28.12504

4.12.14-122.98-default 6.32.12905

4.12.14-122.116-default 6.32.12905

4.12.14-122.110-default 6.32.12905

4.12.14-122.57-default 6.28.12504

4.12.14-122.83-default 6.28.12504

4.12.14-122.60-default 6.28.12504

4.12.14-122.32-default 6.28.12504

4.12.14-122.20-default 6.28.12504

4.12.14-122.124-default 6.32.12905

4.12.14-122.7-default 6.28.12504

4.12.14-122.37-default 6.28.12504

4.12.14-122.17-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 151/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.12.14-122.66-default 6.28.12504

suse sles15-sp0

Kernel Minimum sensor version Last supported sensor version

4.12.14-23-default 6.28.12504

4.12.14-25.6-default 6.28.12504

4.12.14-150.55-default 6.28.12504

4.12.14-150.83-default 6.28.12504

4.12.14-150.58-default 6.28.12504

4.12.14-150.47-default 6.28.12504

4.12.14-150.69-default 6.28.12504

4.12.14-150.14-default 6.28.12504

4.12.14-150.41-default 6.28.12504

4.12.14-150.35-default 6.28.12504

4.12.14-25.22-default 6.28.12504

4.12.14-150.63-default 6.28.12504

4.12.14-25.19-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 152/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.12.14-150.78-default 6.28.12504

4.12.14-25.3-default 6.28.12504

4.12.14-25.16-default 6.28.12504

4.12.14-150.75-default 6.28.12504

4.12.14-25.28-default 6.28.12504

4.12.14-150.32-default 6.28.12504

4.12.14-150.86-default 6.28.12504

4.12.14-150.17-default 6.28.12504

4.12.14-150.72-default 6.28.12504

4.12.14-150.52-default 6.28.12504

4.12.14-150.66-default 6.28.12504

4.12.14-150.22-default 6.28.12504

4.12.14-150.38-default 6.28.12504

4.12.14-150.27-default 6.28.12504

4.12.14-25.25-default 6.28.12504

4.12.14-25.13-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 153/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

suse sles15-sp1

Kernel Minimum sensor version Last supported sensor version

4.12.14-197.105-default 6.28.12504

4.12.14-197.75-default 6.28.12504

4.12.14-195-default 6.28.12504

4.12.14-197.48-default 6.28.12504

4.12.14-197.37-default 6.28.12504

4.12.14-197.56-default 6.28.12504

4.12.14-197.99-default 6.28.12504

4.12.14-197.72-default 6.28.12504

4.12.14-197.29-default 6.28.12504

4.12.14-197.51-default 6.28.12504

4.12.14-197.21-default 6.28.12504

4.12.14-197.15-default 6.28.12504

4.12.14-197.4-default 6.28.12504

4.12.14-197.18-default 6.28.12504

4.12.14-197.92-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 154/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.12.14-197.89-default 6.28.12504

4.12.14-197.86-default 6.28.12504

4.12.14-197.102-default 6.28.12504

4.12.14-197.64-default 6.28.12504

4.12.14-197.26-default 6.28.12504

4.12.14-197.83-default 6.28.12504

4.12.14-197.67-default 6.28.12504

4.12.14-197.61-default 6.28.12504

4.12.14-197.108-default 6.28.12504

4.12.14-197.34-default 6.28.12504

4.12.14-197.10-default 6.28.12504

4.12.14-197.78-default 6.28.12504

4.12.14-197.7-default 6.28.12504

4.12.14-197.45-default 6.28.12504

4.12.14-197.40-default 6.28.12504

suse sles15-sp2

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 155/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.3.18-24.29-default 6.28.12504

5.3.18-24.37-default 6.28.12504

5.3.18-24.64-default 6.28.12504

5.3.18-24.49-default 6.28.12504

5.3.18-24.78-default 6.28.12504

5.3.18-24.86-default 6.30.12704

5.3.18-24.12-default 6.28.12504

5.3.18-24.34-default 6.28.12504

5.3.18-24.43-default 6.28.12504

5.3.18-24.53.4-default 6.28.12504

5.3.18-24.52-default 6.28.12504

5.3.18-24.93-default 6.30.12704

5.3.18-24.83-default 6.30.12704

5.3.18-22-default 6.28.12504

5.3.18-24.15-default 6.28.12504

5.3.18-24.99-default 6.30.12704

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 156/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.3.18-24.70-default 6.28.12504

5.3.18-24.107-default 6.30.12704

5.3.18-24.46-default 6.28.12504

5.3.18-24.75-default 6.28.12504

5.3.18-24.9-default 6.28.12504

5.3.18-24.96-default 6.30.12704

5.3.18-24.24-default 6.28.12504

5.3.18-24.102-default 6.30.12704

5.3.18-24.61-default 6.28.12504

5.3.18-24.67-default 6.28.12504

suse sles15_sp3

Kernel Minimum sensor version Last supported sensor version

5.3.18-150300.59.68-default 6.34.13109

5.3.18-59.13-default 6.28.12504

5.3.18-59.30-default 6.30.12704

5.3.18-59.5-default 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 157/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.3.18-57-default 6.28.12504

5.3.18-59.27-default 6.30.12704

5.3.18-59.16-default 6.28.12504

5.3.18-150300.59.63-default 6.34.13109

5.3.18-59.34-default 6.30.12704

5.3.18-59.19-default 6.28.12504

5.3.18-150300.59.43-default 6.34.13109

5.3.18-150300.59.49-default 6.34.13109

5.3.18-59.10-default 6.28.12504

5.3.18-150300.59.54-default 6.34.13109

5.3.18-150300.59.46-default 6.34.13109

5.3.18-59.40-default 6.30.12704

5.3.18-59.37-default 6.30.12704

5.3.18-150300.59.60-default 6.34.13109

5.3.18-59.24-default 6.30.12704

ubuntu 14.x

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 158/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1067-aws 6.35.13206

4.4.0-1054-aws 6.35.13206

4.4.0-59-generic 6.29.12606

4.4.0-1074-aws 6.35.13206

4.4.0-1016-aws 6.35.13206

4.4.0-137-generic 6.29.12606

4.4.0-1039-aws 6.35.13206

3.13.0-145-generic 6.29.12606

3.13.0-95-generic 6.29.12606

3.13.0-83-generic 6.29.12606

3.13.0-86-generic 6.29.12606

3.13.0-29-generic 6.29.12606

3.13.0-162-generic 6.29.12606

4.4.0-142-generic 6.29.12606

3.13.0-24-generic 6.29.12606

4.4.0-1073-aws 6.35.13206

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 159/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.13.0-51-generic 6.29.12606

4.4.0-28-generic 6.29.12606

4.4.0-218-generic 6.35.13206

4.4.0-1036-aws 6.35.13206

3.13.0-164-generic 6.29.12606

3.13.0-71-generic 6.29.12606

4.4.0-1010-aws 6.35.13206

3.13.0-85-generic 6.29.12606

4.4.0-1024-aws 6.35.13206

3.13.0-107-generic 6.29.12606

3.13.0-158-generic 6.29.12606

3.13.0-43-generic 6.29.12606

4.4.0-71-generic 6.29.12606

4.4.0-1060-aws 6.35.13206

4.4.0-1009-aws 6.35.13206

3.13.0-74-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 160/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1059-aws 6.35.13206

3.13.0-115-generic 6.29.12606

4.4.0-1040-aws 6.35.13206

3.13.0-44-generic 6.29.12606

3.13.0-45-generic 6.29.12606

4.4.0-104-generic 6.29.12606

4.4.0-1078-aws 6.35.13206

4.4.0-139-generic 6.29.12606

3.13.0-106-generic 6.29.12606

3.13.0-160-generic 6.29.12606

3.13.0-116-generic 6.29.12606

4.4.0-79-generic 6.29.12606

4.4.0-1014-aws 6.35.13206

3.13.0-169-generic 6.29.12606

3.13.0-48-generic 6.29.12606

4.4.0-1006-aws 6.35.13206

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 161/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.13.0-121-generic 6.29.12606

4.4.0-134-generic 6.29.12606

3.13.0-63-generic 6.29.12606

3.13.0-33-generic 6.29.12606

4.4.0-31-generic 6.29.12606

4.4.0-135-generic 6.29.12606

3.13.0-62-generic 6.29.12606

4.4.0-112-generic 6.29.12606

4.4.0-140-generic 6.29.12606

3.13.0-108-generic 6.29.12606

3.13.0-66-generic 6.29.12606

4.4.0-57-generic 6.29.12606

4.4.0-67-generic 6.29.12606

4.4.0-1094-aws 6.35.13206

4.4.0-1088-aws 6.35.13206

4.4.0-1044-aws 6.35.13206

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 162/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-22-generic 6.29.12606

4.4.0-206-generic 6.35.13207

3.13.0-98-generic 6.29.12606

4.4.0-93-generic 6.29.12606

3.13.0-76-generic 6.29.12606

3.13.0-166-generic 6.29.12606

4.4.0-51-generic 6.29.12606

3.13.0-156-generic 6.29.12606

3.13.0-41-generic 6.29.12606

4.4.0-1077-aws 6.35.13206

4.4.0-1101-aws 6.35.13206

4.4.0-1090-aws 6.35.13206

4.4.0-1028-aws 6.35.13206

4.4.0-1104-aws 6.35.13206

4.4.0-1095-aws 6.35.13206

4.4.0-141-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 163/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-138-generic 6.29.12606

4.4.0-70-generic 6.29.12606

3.13.0-133-generic 6.29.12606

4.4.0-1082-aws 6.35.13206

3.13.0-163-generic 6.29.12606

4.4.0-42-generic 6.29.12606

4.4.0-1086-aws 6.35.13206

3.13.0-132-generic 6.29.12606

4.4.0-1097-aws 6.35.13206

4.4.0-1042-aws 6.35.13206

4.4.0-109-generic 6.29.12606

3.13.0-165-generic 6.29.12606

4.4.0-1093-aws 6.35.13206

3.13.0-109-generic 6.29.12606

3.13.0-65-generic 6.29.12606

4.4.0-1037-aws 6.35.13206

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 164/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1062-aws 6.35.13206

4.4.0-127-generic 6.29.12606

4.4.0-1029-aws 6.35.13206

4.4.0-146-generic 6.29.12606

3.13.0-77-generic 6.29.12606

4.4.0-1083-aws 6.35.13206

3.13.0-73-generic 6.29.12606

4.4.0-1032-aws 6.35.13206

3.13.0-34-generic 6.29.12606

3.13.0-112-generic 6.29.12606

4.4.0-101-generic 6.29.12606

3.13.0-128-generic 6.29.12606

3.13.0-119-generic 6.29.12606

4.4.0-24-generic 6.29.12606

4.4.0-62-generic 6.29.12606

3.13.0-35-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 165/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1087-aws 6.35.13206

3.13.0-87-generic 6.29.12606

4.4.0-96-generic 6.29.12606

3.13.0-110-generic 6.29.12606

3.13.0-125-generic 6.29.12606

4.4.0-1099-aws 6.35.13206

4.4.0-63-generic 6.29.12606

4.4.0-103-generic 6.29.12606

4.4.0-130-generic 6.29.12606

3.13.0-93-generic 6.29.12606

3.13.0-135-generic 6.29.12606

4.4.0-45-generic 6.29.12606

4.4.0-81-generic 6.29.12606

3.13.0-153-generic 6.29.12606

3.13.0-149-generic 6.29.12606

3.13.0-91-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 166/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.13.0-67-generic 6.29.12606

4.4.0-1034-aws 6.35.13206

4.4.0-219-generic 6.35.13206

4.4.0-213-generic 6.35.13206

4.4.0-97-generic 6.29.12606

4.4.0-64-generic 6.29.12606

4.4.0-210-generic 6.35.13206

4.4.0-89-generic 6.29.12606

3.13.0-32-generic 6.29.12606

3.13.0-61-generic 6.29.12606

4.4.0-211-generic 6.35.13206

3.13.0-100-generic 6.29.12606

4.4.0-98-generic 6.29.12606

4.4.0-1019-aws 6.35.13206

3.13.0-101-generic 6.29.12606

3.13.0-53-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 167/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1003-aws 6.35.13206

4.4.0-121-generic 6.29.12606

3.13.0-155-generic 6.29.12606

4.4.0-83-generic 6.29.12606

3.13.0-167-generic 6.29.12606

3.13.0-170-generic 6.29.12606

4.4.0-215-generic 6.35.13206

3.13.0-103-generic 6.29.12606

3.13.0-157-generic 6.29.12606

4.4.0-34-generic 6.29.12606

4.4.0-1038-aws 6.35.13206

4.4.0-1025-aws 6.35.13206

4.4.0-1081-aws 6.35.13206

4.4.0-1102-aws 6.35.13206

4.4.0-108-generic 6.29.12606

4.4.0-1075-aws 6.35.13206

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 168/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.13.0-36-generic 6.29.12606

4.4.0-53-generic 6.29.12606

4.4.0-66-generic 6.29.12606

3.13.0-57-generic 6.29.12606

4.4.0-38-generic 6.29.12606

4.4.0-1012-aws 6.35.13206

4.4.0-1022-aws 6.35.13206

4.4.0-92-generic 6.29.12606

4.4.0-214-generic 6.35.13206

4.4.0-1023-aws 6.35.13206

3.13.0-129-generic 6.29.12606

3.13.0-27-generic 6.29.12606

4.4.0-1005-aws 6.35.13206

3.13.0-141-generic 6.29.12606

4.4.0-1098-aws 6.35.13206

4.4.0-1066-aws 6.35.13206

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 169/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-119-generic 6.29.12606

3.13.0-168-generic 6.29.12606

4.4.0-143-generic 6.29.12606

4.4.0-1061-aws 6.35.13206

4.4.0-36-generic 6.29.12606

4.4.0-47-generic 6.29.12606

4.4.0-1091-aws 6.35.13206

4.4.0-1027-aws 6.35.13206

3.13.0-113-generic 6.29.12606

3.13.0-70-generic 6.29.12606

3.13.0-144-generic 6.29.12606

3.13.0-79-generic 6.29.12606

3.13.0-147-generic 6.29.12606

3.13.0-161-generic 6.29.12606

3.13.0-55-generic 6.29.12606

3.13.0-142-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 170/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1002-aws 6.35.13206

3.13.0-68-generic 6.29.12606

3.13.0-46-generic 6.29.12606

4.4.0-1056-aws 6.35.13206

4.4.0-1096-aws 6.35.13206

3.13.0-117-generic 6.29.12606

4.4.0-1065-aws 6.35.13206

4.4.0-1085-aws 6.35.13206

4.4.0-111-generic 6.29.12606

4.4.0-133-generic 6.29.12606

4.4.0-1011-aws 6.35.13206

3.13.0-105-generic 6.29.12606

3.13.0-40-generic 6.29.12606

3.13.0-126-generic 6.29.12606

4.4.0-87-generic 6.29.12606

3.13.0-49-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 171/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1058-aws 6.35.13206

3.13.0-123-generic 6.29.12606

3.13.0-30-generic 6.29.12606

4.4.0-1103-aws 6.35.13206

3.13.0-59-generic 6.29.12606

3.13.0-151-generic 6.29.12606

4.4.0-91-generic 6.29.12606

3.13.0-54-generic 6.29.12606

3.13.0-58-generic 6.29.12606

3.13.0-39-generic 6.29.12606

4.4.0-124-generic 6.29.12606

3.13.0-96-generic 6.29.12606

3.13.0-137-generic 6.29.12606

4.4.0-1064-aws 6.35.13206

4.4.0-1031-aws 6.35.13206

4.4.0-21-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 172/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-204-generic 6.35.13206

4.4.0-1055-aws 6.35.13206

3.13.0-143-generic 6.29.12606

4.4.0-208-generic 6.35.13206

4.4.0-75-generic 6.29.12606

4.4.0-1017-aws 6.35.13206

4.4.0-128-generic 6.29.12606

4.4.0-148-generic 6.29.12606

4.4.0-144-generic 6.29.12606

4.4.0-1076-aws 6.35.13206

3.13.0-139-generic 6.29.12606

4.4.0-72-generic 6.29.12606

4.4.0-131-generic 6.29.12606

4.4.0-1092-aws 6.35.13206

3.13.0-92-generic 6.29.12606

3.13.0-37-generic 6.29.12606

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 173/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

3.13.0-52-generic 6.29.12606

4.4.0-116-generic 6.29.12606

3.13.0-88-generic 6.29.12606

4.4.0-78-generic 6.29.12606

ubuntu 16.x

Kernel Minimum sensor version Last supported sensor version

4.15.0-171-generic 6.34.13108

4.4.0-63-generic 6.28.12504

4.15.0-1099-gcp 6.34.13108

4.15.0-1096-gcp 6.28.12504

4.4.0-1004-aws 6.28.12504

4.4.0-1018-aws 6.28.12504

4.4.0-1122-aws 6.28.12504

4.4.0-198-generic 6.28.12504

4.4.0-214-generic 6.28.12504

4.4.0-1077-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 174/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-116-generic 6.28.12504

4.15.0-1014-gcp 6.28.12504

4.4.0-1069-aws 6.28.12504

4.4.0-1098-aws 6.28.12504

4.4.0-67-generic 6.28.12504

4.15.0-43-generic 6.28.12504

4.15.0-169-generic 6.34.13108

4.4.0-1133-aws 6.28.12504

4.4.0-66-generic 6.28.12504

4.4.0-203-generic 6.28.12504

4.4.0-119-generic 6.28.12504

4.15.0-69-generic 6.28.12504

4.4.0-1075-aws 6.28.12504

4.15.0-1109-gcp 6.34.13108

4.4.0-57-generic 6.28.12504

4.4.0-140-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 175/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1140-aws 6.28.12504

4.4.0-1104-aws 6.28.12504

4.15.0-1029-gcp 6.28.12504

4.4.0-1022-aws 6.28.12504

4.4.0-150-generic 6.28.12504

4.15.0-1032-gcp 6.28.12504

4.15.0-166-generic 6.34.13108

4.4.0-137-generic 6.28.12504

4.4.0-97-generic 6.28.12504

4.4.0-1072-aws 6.28.12504

4.4.0-178-generic 6.28.12504

4.4.0-189-generic 6.28.12504

4.15.0-1049-gcp 6.28.12504

4.15.0-22-generic 6.28.12504

4.15.0-126-generic 6.28.12504

4.4.0-154-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 176/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1050-aws 6.28.12504

4.4.0-1054-aws 6.28.12504

4.15.0-123-generic 6.28.12504

4.15.0-1095-gcp 6.28.12504

4.15.0-45-generic 6.28.12504

4.4.0-1028-aws 6.28.12504

4.15.0-1027-gcp 6.28.12504

4.15.0-1086-gcp 6.28.12504

4.4.0-1109-aws 6.28.12504

4.15.0-1017-gcp 6.28.12504

4.4.0-1067-aws 6.28.12504

4.4.0-1105-aws 6.28.12504

4.4.0-62-generic 6.28.12504

4.4.0-36-generic 6.28.12504

4.4.0-53-generic 6.28.12504

4.15.0-161-generic 6.34.13108

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 177/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1106-aws 6.28.12504

4.15.0-96-generic 6.28.12504

4.4.0-1094-aws 6.28.12504

4.15.0-32-generic 6.28.12504

4.15.0-46-generic 6.28.12504

4.4.0-38-generic 6.28.12504

4.4.0-79-generic 6.28.12504

4.4.0-190-generic 6.28.12504

4.15.0-1055-gcp 6.28.12504

4.15.0-1081-gcp 6.28.12504

4.4.0-1049-aws 6.28.12504

4.4.0-1043-aws 6.28.12504

4.4.0-1130-aws 6.28.12504

4.15.0-1106-gcp 6.34.13108

4.4.0-221-generic 6.28.12504

4.15.0-1098-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 178/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1034-gcp 6.28.12504

4.15.0-42-generic 6.28.12504

4.4.0-1126-aws 6.28.12504

4.4.0-1065-aws 6.28.12504

4.15.0-23-generic 6.28.12504

4.4.0-157-generic 6.28.12504

4.4.0-222-generic 6.28.12504

4.15.0-1093-gcp 6.28.12504

4.4.0-1057-aws 6.28.12504

4.4.0-1087-aws 6.28.12504

4.4.0-1095-aws 6.28.12504

4.15.0-140-generic 6.28.12504

4.4.0-1011-aws 6.28.12504

4.4.0-128-generic 6.28.12504

4.15.0-162-generic 6.34.13108

4.4.0-96-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 179/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-210-generic 6.28.12504

4.4.0-1127-aws 6.28.12504

4.4.0-1066-aws 6.28.12504

4.15.0-173-generic 6.34.13108

4.4.0-83-generic 6.28.12504

4.4.0-143-generic 6.28.12504

4.15.0-1112-gcp 6.34.13108

4.15.0-143-generic 6.34.13108

4.15.0-74-generic 6.28.12504

4.15.0-1100-gcp 6.34.13108

4.4.0-1084-aws 6.28.12504

4.4.0-24-generic 6.28.12504

4.15.0-1091-gcp 6.28.12504

4.4.0-186-generic 6.28.12504

4.15.0-188-generic 6.34.13108

4.15.0-153-generic 6.34.13108

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 180/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-60-generic 6.28.12504

4.4.0-1111-aws 6.28.12504

4.4.0-1017-aws 6.28.12504

4.15.0-184-generic 6.34.13108

4.15.0-1090-gcp 6.28.12504

4.4.0-179-generic 6.28.12504

4.4.0-176-generic 6.28.12504

4.15.0-1024-gcp 6.28.12504

4.4.0-47-generic 6.28.12504

4.15.0-1087-gcp 6.28.12504

4.4.0-133-generic 6.28.12504

4.4.0-121-generic 6.28.12504

4.15.0-1060-gcp 6.28.12504

4.4.0-1037-aws 6.28.12504

4.15.0-106-generic 6.28.12504

4.15.0-1047-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 181/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-148-generic 6.28.12504

4.15.0-1088-gcp 6.28.12504

4.4.0-108-generic 6.28.12504

4.4.0-1007-aws 6.28.12504

4.15.0-47-generic 6.28.12504

4.15.0-129-generic 6.28.12504

4.15.0-1015-gcp 6.28.12504

4.15.0-88-generic 6.28.12504

4.4.0-208-generic 6.28.12504

4.4.0-31-generic 6.28.12504

4.4.0-165-generic 6.28.12504

4.15.0-1040-gcp 6.28.12504

4.4.0-1100-aws 6.28.12504

4.4.0-1137-aws 6.28.12504

4.15.0-175-generic 6.34.13108

4.4.0-1044-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 182/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1013-aws 6.28.12504

4.4.0-213-generic 6.28.12504

4.4.0-1134-aws 6.28.12504

4.4.0-1016-aws 6.28.12504

4.4.0-89-generic 6.28.12504

4.15.0-1019-gcp 6.28.12504

4.4.0-1118-aws 6.28.12504

4.4.0-1123-aws 6.28.12504

4.15.0-1094-gcp 6.28.12504

4.4.0-64-generic 6.28.12504

4.15.0-1033-gcp 6.28.12504

4.4.0-1121-aws 6.28.12504

4.15.0-1114-gcp 6.34.13108

4.15.0-1021-gcp 6.28.12504

4.15.0-1023-gcp 6.28.12504

4.4.0-1119-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 183/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1048-aws 6.28.12504

4.4.0-1114-aws 6.28.12504

4.15.0-1026-gcp 6.28.12504

4.4.0-1020-aws 6.28.12504

4.4.0-1009-aws 6.28.12504

4.15.0-66-generic 6.28.12504

4.15.0-1097-gcp 6.28.12504

4.4.0-142-generic 6.28.12504

4.4.0-1102-aws 6.28.12504

4.4.0-21-generic 6.28.12504

4.15.0-156-generic 6.34.13108

4.15.0-1103-gcp 6.34.13108

4.15.0-52-generic 6.28.12504

4.4.0-218-generic 6.28.12504

4.15.0-1041-gcp 6.28.12504

4.15.0-117-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 184/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-128-generic 6.28.12504

4.15.0-180-generic 6.34.13108

4.15.0-70-generic 6.28.12504

4.4.0-1026-aws 6.28.12504

4.4.0-1062-aws 6.28.12504

4.15.0-1036-gcp 6.28.12504

4.15.0-51-generic 6.28.12504

4.4.0-1083-aws 6.28.12504

4.4.0-138-generic 6.28.12504

4.4.0-1047-aws 6.28.12504

4.15.0-167-generic 6.34.13108

4.15.0-1116-gcp 6.34.13108

4.4.0-219-generic 6.28.12504

4.4.0-135-generic 6.28.12504

4.4.0-1131-aws 6.28.12504

4.4.0-1096-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 185/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-58-generic 6.28.12504

4.4.0-194-generic 6.28.12504

4.15.0-1080-gcp 6.28.12504

4.4.0-22-generic 6.28.12504

4.4.0-28-generic 6.28.12504

4.15.0-1025-gcp 6.28.12504

4.4.0-204-generic 6.28.12504

4.4.0-1035-aws 6.28.12504

4.15.0-1118-gcp 6.34.13108

4.4.0-131-generic 6.28.12504

4.4.0-77-generic 6.28.12504

4.4.0-124-generic 6.28.12504

4.15.0-1050-gcp 6.28.12504

4.15.0-1108-gcp 6.34.13108

4.4.0-227-generic 6.28.12504

4.4.0-1055-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 186/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-42-generic 6.28.12504

4.4.0-1143-aws 6.28.12504

4.15.0-1077-gcp 6.28.12504

4.4.0-70-generic 6.28.12504

4.4.0-1031-aws 6.28.12504

4.15.0-107-generic 6.28.12504

4.4.0-1132-aws 6.28.12504

4.15.0-144-generic 6.34.13108

4.4.0-43-generic 6.28.12504

4.15.0-65-generic 6.28.12504

4.15.0-1110-gcp 6.34.13108

4.4.0-212-generic 6.28.12504

4.4.0-92-generic 6.28.12504

4.4.0-51-generic 6.28.12504

4.4.0-130-generic 6.28.12504

4.15.0-112-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 187/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1138-aws 6.28.12504

4.15.0-1078-gcp 6.28.12504

4.4.0-1032-aws 6.28.12504

4.4.0-1128-aws 6.28.12504

4.4.0-1073-aws 6.28.12504

4.4.0-1001-aws 6.28.12504

4.4.0-1030-aws 6.28.12504

4.4.0-112-generic 6.28.12504

4.4.0-1063-aws 6.28.12504

4.15.0-142-generic 6.28.12504

4.15.0-1061-gcp 6.28.12504

4.4.0-164-generic 6.28.12504

4.15.0-163-generic 6.34.13108

4.15.0-177-generic 6.34.13108

4.4.0-170-generic 6.28.12504

4.15.0-20-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 188/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1124-gcp 6.34.13108

4.15.0-34-generic 6.28.12504

4.4.0-216-generic 6.28.12504

4.15.0-118-generic 6.28.12504

4.4.0-141-generic 6.28.12504

4.4.0-101-generic 6.28.12504

4.4.0-1079-aws 6.28.12504

4.4.0-193-generic 6.28.12504

4.4.0-211-generic 6.28.12504

4.4.0-1085-aws 6.28.12504

4.4.0-71-generic 6.28.12504

4.15.0-76-generic 6.28.12504

4.4.0-1081-aws 6.28.12504

4.4.0-81-generic 6.28.12504

4.15.0-132-generic 6.28.12504

4.15.0-1028-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 189/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-29-generic 6.28.12504

4.15.0-151-generic 6.34.13108

4.4.0-72-generic 6.28.12504

4.4.0-200-generic 6.28.12504

4.4.0-1074-aws 6.28.12504

4.4.0-98-generic 6.28.12504

4.15.0-1042-gcp 6.28.12504

4.4.0-187-generic 6.28.12504

4.4.0-185-generic 6.28.12504

4.4.0-1107-aws 6.28.12504

4.15.0-159-generic 6.34.13108

4.4.0-174-generic 6.28.12504

4.4.0-217-generic 6.28.12504

4.4.0-91-generic 6.28.12504

4.4.0-93-generic 6.28.12504

4.4.0-1101-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 190/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-1117-aws 6.28.12504

4.15.0-1120-gcp 6.34.13108

4.15.0-39-generic 6.28.12504

4.15.0-1127-gcp 6.34.13108

4.15.0-147-generic 6.34.13108

4.15.0-99-generic 6.28.12504

4.4.0-59-generic 6.28.12504

4.15.0-1130-gcp 6.34.13108

4.15.0-139-generic 6.28.12504

4.4.0-171-generic 6.28.12504

4.4.0-145-generic 6.28.12504

4.15.0-120-generic 6.28.12504

4.15.0-122-generic 6.28.12504

4.15.0-38-generic 6.28.12504

4.4.0-206-generic 6.28.12504

4.15.0-13-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 191/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1111-gcp 6.34.13108

4.4.0-1135-aws 6.28.12504

4.4.0-34-generic 6.28.12504

4.15.0-1071-gcp 6.28.12504

4.4.0-184-generic 6.28.12504

4.15.0-1044-gcp 6.28.12504

4.15.0-136-generic 6.28.12504

4.4.0-1070-aws 6.28.12504

4.4.0-134-generic 6.28.12504

4.4.0-1060-aws 6.28.12504

4.4.0-161-generic 6.28.12504

4.4.0-104-generic 6.28.12504

4.15.0-1107-gcp 6.34.13108

4.4.0-1110-aws 6.28.12504

4.4.0-109-generic 6.28.12504

4.15.0-33-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 192/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-50-generic 6.28.12504

4.4.0-1129-aws 6.28.12504

4.4.0-75-generic 6.28.12504

4.4.0-45-generic 6.28.12504

4.15.0-1030-gcp 6.28.12504

4.4.0-159-generic 6.28.12504

4.15.0-1018-gcp 6.28.12504

4.4.0-197-generic 6.28.12504

4.15.0-158-generic 6.34.13108

4.4.0-1088-aws 6.28.12504

4.15.0-1121-gcp 6.34.13108

4.15.0-1122-gcp 6.34.13108

4.4.0-78-generic 6.28.12504

4.15.0-15-generic 6.28.12504

4.15.0-1046-gcp 6.28.12504

4.15.0-187-generic 6.34.13108

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 193/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-122-generic 6.28.12504

4.4.0-177-generic 6.28.12504

4.15.0-55-generic 6.28.12504

4.15.0-1119-gcp 6.34.13108

4.15.0-30-generic 6.28.12504

4.4.0-1092-aws 6.28.12504

4.15.0-133-generic 6.28.12504

4.15.0-36-generic 6.28.12504

4.15.0-101-generic 6.28.12504

4.4.0-151-generic 6.28.12504

4.4.0-1139-aws 6.28.12504

4.15.0-1115-gcp 6.34.13108

4.15.0-62-generic 6.28.12504

4.4.0-1041-aws 6.28.12504

4.4.0-103-generic 6.28.12504

4.4.0-127-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 194/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-154-generic 6.34.13108

4.4.0-146-generic 6.28.12504

4.15.0-1052-gcp 6.28.12504

4.4.0-201-generic 6.28.12504

4.4.0-1039-aws 6.28.12504

4.15.0-1037-gcp 6.28.12504

4.4.0-166-generic 6.28.12504

4.4.0-173-generic 6.28.12504

4.4.0-1038-aws 6.28.12504

4.15.0-176-generic 6.34.13108

4.15.0-48-generic 6.28.12504

4.15.0-64-generic 6.28.12504

4.4.0-1052-aws 6.28.12504

4.4.0-169-generic 6.28.12504

4.15.0-1058-gcp 6.28.12504

4.4.0-139-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 195/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.4.0-209-generic 6.28.12504

4.4.0-1113-aws 6.28.12504

4.15.0-1083-gcp 6.28.12504

4.15.0-137-generic 6.28.12504

4.4.0-1099-aws 6.28.12504

4.4.0-1112-aws 6.28.12504

4.4.0-1090-aws 6.28.12504

4.15.0-1092-gcp 6.28.12504

4.4.0-1124-aws 6.28.12504

4.4.0-1002-fips 6.28.12504

4.15.0-54-generic 6.28.12504

4.15.0-24-generic 6.28.12504

4.15.0-1084-gcp 6.28.12504

4.4.0-1003-aws 6.28.12504

4.4.0-1012-aws 6.28.12504

4.4.0-224-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 196/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-72-generic 6.28.12504

4.4.0-1061-aws 6.28.12504

4.4.0-87-generic 6.28.12504

4.4.0-168-generic 6.28.12504

4.15.0-91-generic 6.28.12504

4.15.0-115-generic 6.28.12504

4.4.0-223-generic 6.28.12504

ubuntu 18.x

Kernel Minimum sensor version Last supported sensor version

4.15.0-1084-gcp 6.28.12504

4.15.0-147-generic 6.28.12504

5.4.0-40-generic 6.28.12504

4.15.0-1010-aws 6.28.12504

5.4.0-60-generic 6.28.12504

4.15.0-1034-gcp 6.28.12504

4.15.0-1099-ibm-gt 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 197/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1073-fips 6.38.13501

4.15.0-1050-aws 6.28.12504

5.4.0-1064-gcp 6.28.12504

4.15.0-51-generic 6.28.12504

4.15.0-64-generic 6.28.12504

4.15.0-1058-ibm-gt 6.28.12504

5.4.0-1034-aws 6.28.12504

4.15.0-1092-aws 6.28.12504

4.15.0-1094-gcp 6.28.12504

4.15.0-1113-ibm-gt 6.28.12504

5.4.0-86-generic 6.28.12504

4.15.0-1078-fips 6.38.13501

5.4.0-56-generic 6.28.12504

4.15.0-1025-aws 6.28.12504

5.4.0-59-generic 6.28.12504

4.15.0-76-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 198/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1055-gke 6.34.13108

4.15.0-58-generic 6.28.12504

5.4.0-1060-gcp 6.28.12504

4.15.0-1048-ibm-gt 6.28.12504

4.15.0-1098-gcp 6.28.12504

4.15.0-140-generic 6.28.12504

5.4.0-1067-gke 6.34.13109

4.15.0-1033-aws 6.28.12504

4.15.0-1087-ibm-gt 6.28.12504

5.4.0-1057-gcp 6.28.12504

4.15.0-123-generic 6.28.12504

4.15.0-1051-fips 6.38.13501

4.15.0-1053-fips 6.38.13501

4.15.0-88-generic 6.28.12504

4.15.0-1119-aws 6.28.12504

5.4.0-1059-gke 6.34.13109

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 199/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1024-gcp 6.28.12504

4.15.0-1058-aws 6.28.12504

5.4.0-1083-azure 6.28.12504

4.15.0-1037-gcp 6.28.12504

4.15.0-141-generic 6.28.12504

5.4.0-1022-azure 6.28.12504

4.15.0-1047-aws 6.28.12504

5.4.0-97-generic 6.28.12504

4.15.0-1093-aws 6.28.12504

5.4.0-1039-gke 6.34.13108

4.15.0-1103-aws 6.28.12504

4.15.0-1124-gcp 6.28.12504

4.15.0-1063-fips 6.38.13501

5.4.0-1056-aws 6.28.12504

5.4.0-92-generic 6.28.12504

5.4.0-1024-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 200/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-109-generic 6.28.12504

4.15.0-1040-aws 6.28.12504

4.15.0-1011-fips 6.28.12504

5.4.0-1069-gcp 6.28.12504

5.4.0-1035-gke 6.34.13108

4.15.0-144-generic 6.28.12504

5.4.0-1058-azure 6.28.12504

4.15.0-1103-gcp 6.28.12504

4.15.0-1052-aws 6.28.12504

5.4.0-1074-gke 6.34.13109

4.15.0-1120-gcp 6.28.12504

5.4.0-1068-aws 6.28.12504

5.4.0-1047-aws 6.28.12504

5.4.0-1032-gke 6.34.13108

5.4.0-1036-gcp 6.28.12504

5.3.0-1034-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 201/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1048-aws 6.28.12504

4.15.0-1029-fips 6.38.13501

4.15.0-1130-gcp 6.28.12504

5.4.0-1025-aws 6.28.12504

5.4.0-1049-azure 6.28.12504

4.15.0-154-generic 6.28.12504

4.15.0-1044-fips 6.38.13501

5.3.0-1023-aws 6.28.12504

4.15.0-1096-aws 6.28.12504

4.15.0-1077-aws 6.28.12504

5.4.0-1056-azure 6.28.12504

5.3.0-1016-aws 6.28.12504

4.15.0-1058-fips 6.38.13501

5.4.0-1041-aws 6.28.12504

5.4.0-1072-aws 6.28.12504

5.4.0-1023-azure 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 202/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1008-gcp 6.28.12504

5.3.0-1019-aws 6.28.12504

5.4.0-47-generic 6.28.12504

5.4.0-1052-gcp 6.28.12504

4.15.0-1115-gcp 6.28.12504

5.4.0-1034-azure 6.28.12504

4.15.0-128-generic 6.28.12504

4.15.0-1019-aws 6.28.12504

4.15.0-1041-fips 6.38.13501

4.15.0-1032-aws 6.28.12504

4.15.0-1054-aws 6.28.12504

4.15.0-69-generic 6.28.12504

4.15.0-34-generic 6.28.12504

4.15.0-1079-ibm-gt 6.28.12504

5.4.0-1071-aws 6.28.12504

4.15.0-1041-ibm-gt 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 203/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-37-generic 6.28.12504

4.15.0-126-generic 6.28.12504

5.4.0-1043-aws 6.28.12504

4.15.0-1130-aws 6.28.12504

5.4.0-1043-azure 6.28.12504

5.4.0-1059-azure 6.28.12504

4.15.0-62-generic 6.28.12504

4.15.0-44-generic 6.28.12504

4.15.0-1124-aws 6.28.12504

4.15.0-1045-ibm-gt 6.28.12504

4.15.0-1109-ibm-gt 6.28.12504

4.15.0-1127-aws 6.28.12504

5.4.0-81-generic 6.28.12504

4.15.0-175-generic 6.28.12504

5.4.0-64-generic 6.28.12504

5.4.0-1029-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 204/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.3.0-64-generic 6.28.12504

4.15.0-132-generic 6.28.12504

4.15.0-55-generic 6.28.12504

5.4.0-1026-azure 6.28.12504

5.4.0-1071-gke 6.34.13109

4.15.0-1081-gcp 6.28.12504

4.15.0-1090-aws 6.28.12504

4.15.0-1127-gcp 6.28.12504

4.15.0-1119-gcp 6.28.12504

4.15.0-1016-aws 6.28.12504

4.15.0-112-generic 6.28.12504

4.15.0-60-generic 6.28.12504

4.15.0-1066-fips 6.38.13501

5.4.0-1040-gke 6.34.13108

5.4.0-80-generic 6.28.12504

4.15.0-153-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 205/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1071-gcp 6.28.12504

4.15.0-122-generic 6.28.12504

4.15.0-23-generic 6.28.12504

5.3.0-59-generic 6.28.12504

5.4.0-1043-gcp 6.28.12504

4.15.0-1082-aws 6.28.12504

5.4.0-1064-aws 6.28.12504

5.3.0-42-generic 6.28.12504

4.15.0-1133-aws 6.28.12504

4.15.0-1045-fips 6.38.13501

5.4.0-84-generic 6.28.12504

4.15.0-1083-ibm-gt 6.28.12504

5.4.0-74-generic 6.28.12504

5.4.0-100-generic 6.28.12504

5.4.0-91-generic 6.28.12504

4.15.0-1032-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 206/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1054-gke 6.34.13108

4.15.0-176-generic 6.28.12504

5.4.0-110-generic 6.28.12504

4.15.0-169-generic 6.28.12504

5.4.0-1057-gke 6.34.13109

5.4.0-1030-aws 6.28.12504

5.4.0-1063-aws 6.28.12504

4.15.0-1097-ibm-gt 6.28.12504

4.15.0-135-generic 6.28.12504

5.4.0-71-generic 6.28.12504

5.0.0-1028-gcp 6.28.12504

5.3.0-40-generic 6.28.12504

4.15.0-1039-ibm-gt 6.28.12504

5.4.0-1080-azure 6.28.12504

5.4.0-1052-gke 6.34.13108

5.4.0-1035-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 207/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1112-aws 6.28.12504

5.4.0-1069-azure 6.28.12504

5.4.0-1065-gke 6.34.13109

4.15.0-1045-aws 6.28.12504

4.15.0-130-generic 6.28.12504

5.4.0-1025-azure 6.28.12504

5.4.0-1042-gke 6.34.13108

4.15.0-1116-aws 6.28.12504

5.4.0-1053-gke 6.34.13108

4.15.0-38-generic 6.28.12504

5.4.0-66-generic 6.28.12504

5.4.0-1078-azure 6.28.12504

4.15.0-129-generic 6.28.12504

4.15.0-1070-fips 6.38.13501

4.15.0-1110-ibm-gt 6.28.12504

4.15.0-1026-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 208/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1046-fips 6.38.13501

5.4.0-87-generic 6.28.12504

5.4.0-1059-gcp 6.28.12504

4.15.0-1046-ibm-gt 6.28.12504

4.15.0-42-generic 6.28.12504

5.4.0-1051-gke 6.34.13108

4.15.0-1087-aws 6.28.12504

5.4.0-1072-azure 6.28.12504

4.15.0-1027-aws 6.28.12504

4.15.0-1087-gcp 6.28.12504

4.15.0-47-generic 6.28.12504

5.4.0-113-generic 6.28.12504

4.15.0-1037-fips 6.38.13501

4.15.0-1077-gcp 6.28.12504

4.15.0-74-generic 6.28.12504

5.4.0-52-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 209/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1017-aws 6.28.12504

5.4.0-1078-aws 6.28.12504

4.15.0-45-generic 6.28.12504

4.15.0-1035-fips 6.38.13501

5.3.0-46-generic 6.28.12504

4.15.0-1066-aws 6.28.12504

4.15.0-1121-gcp 6.28.12504

5.0.0-1021-gcp 6.28.12504

5.3.0-23-generic 6.28.12504

5.4.0-1037-gcp 6.28.12504

5.0.0-1031-gcp 6.28.12504

5.4.0-1054-aws 6.28.12504

4.15.0-1015-gcp 6.28.12504

4.15.0-171-generic 6.28.12504

5.3.0-19-generic 6.28.12504

5.4.0-1040-azure 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 210/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1041-azure 6.28.12504

5.3.0-51-generic 6.28.12504

4.15.0-1021-gcp 6.28.12504

4.15.0-65-generic 6.28.12504

5.4.0-51-generic 6.28.12504

5.4.0-1028-aws 6.28.12504

4.15.0-1067-aws 6.28.12504

5.4.0-1029-gke 6.34.13108

5.4.0-1022-gcp 6.28.12504

4.15.0-1010-gcp 6.28.12504

5.4.0-1055-gcp 6.28.12504

5.4.0-1032-aws 6.28.12504

4.15.0-1110-gcp 6.28.12504

4.15.0-1072-ibm-gt 6.28.12504

4.15.0-1076-ibm-gt 6.28.12504

4.15.0-1073-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 211/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1112-gcp 6.28.12504

5.4.0-1053-gcp 6.28.12504

5.4.0-107-generic 6.28.12504

4.15.0-1091-ibm-gt 6.28.12504

4.15.0-1083-aws 6.28.12504

5.4.0-1020-aws 6.28.12504

4.15.0-1011-aws 6.28.12504

4.15.0-1034-aws 6.28.12504

4.15.0-1070-ibm-gt 6.28.12504

4.15.0-173-generic 6.28.12504

5.4.0-1036-gke 6.34.13108

4.15.0-1059-fips 6.38.13501

4.15.0-136-generic 6.28.12504

4.15.0-134-generic 6.28.12504

5.4.0-65-generic 6.28.12504

4.15.0-1136-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 212/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1045-aws 6.28.12504

4.15.0-1092-gcp 6.28.12504

4.15.0-96-generic 6.28.12504

5.0.0-1034-gcp 6.28.12504

4.15.0-162-generic 6.28.12504

5.3.0-1017-aws 6.28.12504

4.15.0-1102-aws 6.28.12504

4.15.0-1027-gcp 6.28.12504

5.4.0-1062-azure 6.28.12504

5.0.0-1020-gcp 6.28.12504

4.15.0-1067-ibm-gt 6.28.12504

5.4.0-1031-azure 6.28.12504

4.15.0-1089-ibm-gt 6.28.12504

4.15.0-1095-aws 6.28.12504

4.15.0-1099-gcp 6.28.12504

5.4.0-1038-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 213/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-33-generic 6.28.12504

4.15.0-39-generic 6.28.12504

5.4.0-1056-gke 6.34.13108

5.4.0-1062-gcp 6.28.12504

5.4.0-1039-aws 6.28.12504

4.15.0-1090-ibm-gt 6.28.12504

5.0.0-1033-gcp 6.28.12504

5.4.0-1073-gcp 6.28.12504

5.4.0-1055-azure 6.28.12504

4.15.0-1086-gcp 6.28.12504

4.15.0-108-generic 6.28.12504

4.15.0-1037-aws 6.28.12504

5.4.0-1064-azure 6.28.12504

4.15.0-1088-gcp 6.28.12504

4.15.0-1068-fips 6.38.13501

5.4.0-53-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 214/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1035-aws 6.28.12504

4.15.0-1091-gcp 6.28.12504

4.15.0-1106-ibm-gt 6.28.12504

4.15.0-156-generic 6.28.12504

5.3.0-53-generic 6.28.12504

4.15.0-1114-gcp 6.28.12504

4.15.0-1114-aws 6.28.12504

4.15.0-1038-fips 6.38.13501

5.4.0-1030-gcp 6.28.12504

4.15.0-1043-ibm-gt 6.28.12504

4.15.0-1040-fips 6.38.13501

4.15.0-1107-gcp 6.28.12504

5.4.0-58-generic 6.28.12504

4.15.0-1027-fips 6.38.13501

4.15.0-1048-fips 6.38.13501

5.4.0-1020-azure 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 215/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.0.0-1029-gcp 6.28.12504

5.4.0-1068-azure 6.28.12504

4.15.0-1121-aws 6.28.12504

4.15.0-1051-aws 6.28.12504

5.4.0-1028-gcp 6.28.12504

4.15.0-1060-aws 6.28.12504

5.4.0-1061-azure 6.28.12504

4.15.0-1118-aws 6.28.12504

5.4.0-1036-azure 6.28.12504

5.4.0-1032-gcp 6.28.12504

5.4.0-1068-gke 6.34.13109

5.4.0-1066-aws 6.28.12504

4.15.0-46-generic 6.28.12504

4.15.0-1034-ibm-gt 6.28.12504

4.15.0-1067-fips 6.38.13501

4.15.0-1069-ibm-gt 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 216/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1054-fips 6.38.13501

5.4.0-42-generic 6.28.12504

4.15.0-1065-aws 6.28.12504

5.4.0-1022-aws 6.28.12504

5.4.0-1063-gke 6.34.13109

5.3.0-62-generic 6.28.12504

5.4.0-1046-azure 6.28.12504

5.4.0-1065-aws 6.28.12504

4.15.0-70-generic 6.28.12504

5.4.0-1037-gke 6.34.13108

4.15.0-29-generic 6.28.12504

5.4.0-73-generic 6.28.12504

4.15.0-54-generic 6.28.12504

4.15.0-124-generic 6.28.12504

4.15.0-1098-aws 6.28.12504

4.15.0-1023-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 217/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-118-generic 6.28.12504

5.4.0-1076-gke 6.34.13109

4.15.0-1108-gcp 6.28.12504

4.15.0-184-generic 6.28.12504

5.3.0-1032-aws 6.28.12504

4.15.0-139-generic 6.28.12504

4.15.0-20-generic 6.28.12504

5.4.0-1069-aws 6.28.12504

4.15.0-1037-ibm-gt 6.28.12504

4.15.0-121-generic 6.28.12504

4.15.0-1018-gcp 6.28.12504

5.4.0-1059-aws 6.28.12504

5.4.0-1049-gcp 6.28.12504

5.4.0-1034-gcp 6.28.12504

4.15.0-91-generic 6.28.12504

4.15.0-1106-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 218/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-66-generic 6.28.12504

5.3.0-1033-aws 6.28.12504

5.3.0-22-generic 6.28.12504

4.15.0-161-generic 6.28.12504

5.4.0-1037-aws 6.28.12504

4.15.0-1044-ibm-gt 6.28.12504

5.4.0-1041-gcp 6.28.12504

4.15.0-117-generic 6.28.12504

4.15.0-1065-ibm-gt 6.28.12504

5.4.0-1051-azure 6.28.12504

4.15.0-1023-aws 6.28.12504

5.4.0-62-generic 6.28.12504

5.4.0-1051-gcp 6.28.12504

4.15.0-1097-gcp 6.28.12504

4.15.0-1033-gcp 6.28.12504

4.15.0-1108-ibm-gt 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 219/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1060-ibm-gt 6.28.12504

5.4.0-1063-azure 6.28.12504

5.4.0-89-generic 6.28.12504

4.15.0-1118-gcp 6.28.12504

5.4.0-1044-azure 6.28.12504

4.15.0-1057-fips 6.38.13501

4.15.0-1083-gcp 6.28.12504

5.3.0-1028-aws 6.28.12504

5.4.0-1042-gcp 6.28.12504

4.15.0-1101-aws 6.28.12504

5.4.0-105-generic 6.28.12504

4.15.0-1103-ibm-gt 6.28.12504

4.15.0-1021-aws 6.28.12504

4.15.0-1036-gcp 6.28.12504

5.3.0-61-generic 6.28.12504

4.15.0-1109-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 220/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1066-gke 6.34.13109

4.15.0-1057-ibm-gt 6.28.12504

5.3.0-26-generic 6.28.12504

5.4.0-1047-azure 6.28.12504

4.15.0-1085-ibm-gt 6.28.12504

5.4.0-1072-gke 6.34.13109

4.15.0-137-generic 6.28.12504

4.15.0-30-generic 6.28.12504

4.15.0-1057-aws 6.28.12504

4.15.0-1111-gcp 6.28.12504

5.4.0-1025-gke 6.34.13108

5.4.0-1073-azure 6.28.12504

5.3.0-45-generic 6.28.12504

5.4.0-1077-azure 6.28.12504

4.15.0-167-generic 6.28.12504

5.4.0-1051-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 221/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1056-aws 6.28.12504

4.15.0-1044-aws 6.28.12504

5.0.0-1013-gcp 6.28.12504

4.15.0-101-generic 6.28.12504

4.15.0-1009-gcp 6.28.12504

4.15.0-1044-gcp 6.28.12504

4.15.0-158-generic 6.28.12504

5.4.0-96-generic 6.28.12504

4.15.0-1048-aws 6.28.12504

5.4.0-1080-aws 6.28.12504

4.15.0-1029-gcp 6.28.12504

4.15.0-1098-ibm-gt 6.28.12504

5.4.0-1072-gcp 6.28.12504

4.15.0-1052-fips 6.38.13501

4.15.0-1128-aws 6.28.12504

4.15.0-187-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 222/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1057-aws 6.28.12504

5.4.0-1058-gcp 6.28.12504

4.15.0-1029-aws 6.28.12504

4.15.0-1088-aws 6.28.12504

5.4.0-1067-azure 6.28.12504

4.15.0-1043-aws 6.28.12504

5.4.0-1039-azure 6.28.12504

4.15.0-1072-fips 6.38.13501

4.15.0-1086-aws 6.28.12504

4.15.0-1101-ibm-gt 6.28.12504

4.15.0-1049-fips 6.38.13501

4.15.0-1069-fips 6.38.13501

4.15.0-1075-fips 6.38.13501

5.4.0-1085-azure 6.28.12504

4.15.0-1111-aws 6.28.12504

5.0.0-1026-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 223/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-180-generic 6.28.12504

5.4.0-1065-azure 6.28.12504

4.15.0-1055-fips 6.38.13501

4.15.0-1031-aws 6.28.12504

4.15.0-1034-fips 6.38.13501

4.15.0-1025-gcp 6.28.12504

4.15.0-163-generic 6.28.12504

4.15.0-151-generic 6.28.12504

4.15.0-1106-gcp 6.28.12504

4.15.0-22-generic 6.28.12504

4.15.0-106-generic 6.28.12504

4.15.0-1039-fips 6.38.13501

5.4.0-99-generic 6.28.12504

4.15.0-1084-ibm-gt 6.28.12504

5.4.0-1061-aws 6.28.12504

5.4.0-1033-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 224/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.0.0-1011-gcp 6.28.12504

4.15.0-1028-gcp 6.28.12504

4.15.0-1073-ibm-gt 6.28.12504

5.4.0-1038-gcp 6.28.12504

5.4.0-1058-aws 6.28.12504

4.15.0-1115-ibm-gt 6.28.12504

4.15.0-1040-gcp 6.28.12504

4.15.0-36-generic 6.28.12504

5.4.0-1046-gcp 6.28.12504

5.4.0-1065-gcp 6.28.12504

5.4.0-1078-gcp 6.28.12504

5.4.0-104-generic 6.28.12504

4.15.0-1080-aws 6.28.12504

4.15.0-1100-gcp 6.28.12504

4.15.0-1078-ibm-gt 6.28.12504

4.15.0-1066-ibm-gt 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 225/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1019-gcp 6.28.12504

4.15.0-1094-aws 6.28.12504

5.4.0-1062-gke 6.34.13109

5.4.0-120-generic 6.28.12504

4.15.0-1094-ibm-gt 6.28.12504

4.15.0-1076-aws 6.28.12504

4.15.0-1078-gcp 6.28.12504

4.15.0-1080-ibm-gt 6.28.12504

5.3.0-1030-aws 6.28.12504

5.3.0-24-generic 6.28.12504

4.15.0-1099-aws 6.28.12504

5.4.0-1046-gke 6.34.13108

4.15.0-50-generic 6.28.12504

5.4.0-54-generic 6.28.12504

4.15.0-1116-gcp 6.28.12504

5.4.0-1033-gke 6.34.13108

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 226/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1051-ibm-gt 6.28.12504

4.15.0-1050-fips 6.38.13501

4.15.0-1060-fips 6.38.13501

5.4.0-1024-gcp 6.28.12504

5.4.0-1075-gcp 6.28.12504

5.4.0-1049-gke 6.34.13108

4.15.0-1007-aws 6.28.12504

4.15.0-1009-aws 6.28.12504

4.15.0-43-generic 6.28.12504

4.15.0-52-generic 6.28.12504

4.15.0-1113-azure 6.35.13206

5.4.0-109-generic 6.28.12504

5.4.0-72-generic 6.28.12504

4.15.0-1097-aws 6.28.12504

5.4.0-1055-aws 6.28.12504

5.4.0-70-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 227/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1014-gcp 6.28.12504

4.15.0-142-generic 6.28.12504

4.15.0-1104-ibm-gt 6.28.12504

4.15.0-1079-aws 6.28.12504

4.15.0-1115-aws 6.28.12504

4.15.0-1122-gcp 6.28.12504

4.15.0-1093-gcp 6.28.12504

5.4.0-1035-azure 6.28.12504

5.4.0-1044-gke 6.34.13108

4.15.0-1039-aws 6.28.12504

5.4.0-1074-azure 6.28.12504

5.3.0-1035-aws 6.28.12504

5.4.0-117-generic 6.28.12504

4.15.0-24-generic 6.28.12504

4.15.0-188-generic 6.28.12504

4.15.0-1102-ibm-gt 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 228/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1049-aws 6.28.12504

4.15.0-1076-fips 6.38.13501

5.4.0-1025-gcp 6.28.12504

4.15.0-72-generic 6.28.12504

4.15.0-1086-ibm-gt 6.28.12504

5.4.0-1070-azure 6.28.12504

4.15.0-1074-ibm-gt 6.28.12504

4.15.0-111-generic 6.28.12504

5.4.0-1048-azure 6.28.12504

4.15.0-1116-ibm-gt 6.28.12504

4.15.0-115-generic 6.28.12504

4.15.0-1056-fips 6.38.13501

4.15.0-1096-gcp 6.28.12504

5.4.0-1060-aws 6.28.12504

5.4.0-1080-gcp 6.28.12504

4.15.0-48-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 229/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1019-gcp 6.28.12504

5.4.0-1021-gcp 6.28.12504

4.15.0-1095-gcp 6.28.12504

5.4.0-1056-gcp 6.28.12504

4.15.0-1020-aws 6.28.12504

5.4.0-1063-gcp 6.28.12504

5.4.0-1018-aws 6.28.12504

5.0.0-1025-gcp 6.28.12504

4.15.0-1063-aws 6.28.12504

4.15.0-1030-gcp 6.28.12504

5.4.0-1029-gcp 6.28.12504

5.4.0-90-generic 6.28.12504

5.4.0-1067-gcp 6.28.12504

5.4.0-48-generic 6.28.12504

5.4.0-1068-gcp 6.28.12504

5.3.0-28-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 230/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-99-generic 6.28.12504

5.4.0-39-generic 6.28.12504

4.15.0-1063-ibm-gt 6.28.12504

4.15.0-1091-aws 6.28.12504

4.15.0-1088-ibm-gt 6.28.12504

4.15.0-1035-ibm-gt 6.28.12504

5.4.0-1040-gcp 6.28.12504

4.15.0-143-generic 6.28.12504

4.15.0-1017-gcp 6.28.12504

4.15.0-1038-ibm-gt 6.28.12504

4.15.0-1071-fips 6.38.13501

4.15.0-1053-ibm-gt 6.28.12504

5.4.0-1061-gke 6.34.13109

4.15.0-1110-aws 6.28.12504

5.4.0-94-generic 6.28.12504

5.4.0-67-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 231/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-32-generic 6.28.12504

5.4.0-77-generic 6.28.12504

4.15.0-1042-gcp 6.28.12504

4.15.0-1006-gcp 6.28.12504

4.15.0-1112-ibm-gt 6.28.12504

4.15.0-1080-gcp 6.28.12504

4.15.0-166-generic 6.28.12504

5.4.0-1027-gke 6.34.13108

4.15.0-159-generic 6.28.12504

4.15.0-1109-aws 6.28.12504

5.4.0-1044-gcp 6.28.12504

4.15.0-1090-gcp 6.28.12504

5.4.0-45-generic 6.28.12504

5.4.0-1043-gke 6.34.13108

5.4.0-1075-aws 6.28.12504

4.15.0-177-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 232/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

4.15.0-1041-aws 6.28.12504

4.15.0-1123-aws 6.28.12504

ubuntu 20.x

Kernel Minimum sensor version Last supported sensor version

5.4.0-1049-aws 6.28.12504

5.4.0-1016-azure 6.28.12504

5.4.0-1068-gcp 6.28.12504

5.4.0-1011-gcp 6.28.12504

5.4.0-62-generic 6.28.12504

5.4.0-1018-aws 6.28.12504

5.8.0-1038-aws 6.28.12504

5.4.0-40-generic 6.28.12504

5.8.0-45-generic 6.28.12504

5.4.0-1051-gcp 6.28.12504

5.13.0-22-generic 6.39.13601

5.4.0-1041-gcp 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 233/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-104-generic 6.28.12504

5.4.0-1024-aws 6.28.12504

5.4.0-1043-aws 6.28.12504

5.4.0-110-generic 6.28.12504

5.8.0-28-generic 6.28.12504

5.4.0-53-generic 6.28.12504

5.10.0-1044-oem 6.35.13206

5.11.0-1022-gcp 6.33.13005

5.11.0-1017-gcp 6.33.13003

5.4.0-60-generic 6.28.12504

5.4.0-1073-gcp 6.28.12504

5.4.0-1053-gke 6.34.13108

5.8.0-63-generic 6.28.12504

5.11.0-1014-gcp 6.33.13003

5.4.0-1060-gcp 6.28.12504

5.4.0-97-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 234/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.11.0-1028-aws 6.34.13108

5.4.0-66-generic 6.28.12504

5.4.0-1056-gcp 6.28.12504

5.4.0-77-generic 6.28.12504

5.4.0-100-generic 6.28.12504

5.10.0-1033-oem 6.35.13206

5.4.0-67-generic 6.28.12504

5.4.0-1043-gke 6.34.13108

5.4.0-1049-gke 6.34.13108

5.10.0-1026-oem 6.35.13206

5.4.0-1061-azure 6.28.12504

5.4.0-1058-azure 6.28.12504

5.11.0-25-generic 6.32.12904

5.11.0-43-generic 6.33.13005

5.4.0-109-generic 6.28.12504

5.11.0-1023-aws 6.34.13108

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 235/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1029-aws 6.28.12504

5.11.0-1022-aws 6.33.13005

5.4.0-1056-aws 6.28.12504

5.4.0-1038-aws 6.28.12504

5.11.0-1021-gcp 6.33.13003

5.4.0-1019-azure 6.28.12504

5.4.0-1010-azure 6.28.12504

5.4.0-1052-gke 6.34.13108

5.8.0-43-generic 6.28.12504

5.11.0-1019-aws 6.32.12904

5.10.0-1023-oem 6.35.13206

5.4.0-1015-gcp 6.28.12504

5.4.0-1024-gcp 6.28.12504

5.4.0-1028-gcp 6.28.12504

5.4.0-1071-aws 6.28.12504

5.4.0-1035-azure 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 236/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1055-gcp 6.28.12504

5.4.0-1065-gke 6.34.13109

5.8.0-40-generic 6.28.12504

5.13.0-30-generic 6.39.13601

5.4.0-33-generic 6.28.12504

5.8.0-1035-aws 6.28.12504

5.10.0-1055-oem 6.35.13206

5.13.0-25-generic 6.39.13601

5.13.0-27-generic 6.39.13601

5.4.0-1056-azure 6.28.12504

5.4.0-1045-aws 6.28.12504

5.8.0-44-generic 6.28.12504

5.8.0-25-generic 6.28.12504

5.11.0-27-generic 6.32.12904

5.4.0-92-generic 6.28.12504

5.4.0-1072-gke 6.34.13109

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 237/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1072-azure 6.28.12504

5.10.0-1025-oem 6.35.13206

5.4.0-1028-aws 6.28.12504

5.11.0-34-generic 6.32.12904

5.4.0-1032-aws 6.28.12504

5.4.0-1064-azure 6.28.12504

5.4.0-1066-gke 6.34.13109

5.4.0-1061-gke 6.34.13109

5.4.0-1059-azure 6.28.12504

5.11.0-37-generic 6.32.12904

5.4.0-1037-gke 6.34.13108

5.10.0-1014-oem 6.35.13206

5.11.0-1027-aws 6.34.13108

5.4.0-1058-aws 6.28.12504

5.4.0-1077-azure 6.28.12504

5.10.0-1032-oem 6.35.13206

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 238/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-72-generic 6.28.12504

5.8.0-33-generic 6.28.12504

5.4.0-1051-azure 6.28.12504

5.4.0-1047-azure 6.28.12504

5.10.0-1011-oem 6.35.13206

5.11.0-38-generic 6.32.12904

5.4.0-1043-gcp 6.28.12504

5.4.0-91-generic 6.28.12504

5.10.0-1051-oem 6.35.13206

5.8.0-1032-gcp 6.28.12504

5.4.0-1074-gke 6.34.13109

5.4.0-1067-gke 6.34.13109

5.4.0-1075-gcp 6.28.12504

5.10.0-1045-oem 6.35.13206

5.4.0-1042-gcp 6.28.12504

5.4.0-80-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 239/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.10.0-1053-oem 6.35.13206

5.4.0-58-generic 6.28.12504

5.4.0-1025-aws 6.28.12504

5.8.0-29-generic 6.28.12504

5.4.0-1069-azure 6.28.12504

5.4.0-39-generic 6.28.12504

5.11.0-1018-gcp 6.33.13003

5.10.0-1008-oem 6.35.13206

5.4.0-1066-aws 6.28.12504

5.4.0-1046-azure 6.28.12504

5.4.0-1062-azure 6.28.12504

5.4.0-1040-azure 6.28.12504

5.4.0-1060-aws 6.28.12504

5.4.0-1018-gcp 6.28.12504

5.4.0-1069-gcp 6.28.12504

5.13.0-21-generic 6.39.13601

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 240/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.8.0-53-generic 6.28.12504

5.4.0-1063-gke 6.34.13109

5.11.0-46-generic 6.34.13108

5.4.0-1034-aws 6.28.12504

5.4.0-1034-gcp 6.28.12504

5.4.0-1057-gcp 6.28.12504

5.11.0-1024-gcp 6.34.13108

5.4.0-29-generic 6.28.12504

5.4.0-1055-azure 6.28.12504

5.4.0-1067-azure 6.28.12504

5.4.0-1063-azure 6.28.12504

5.4.0-1044-gke 6.34.13108

5.11.0-1017-aws 6.32.12904

5.4.0-1022-azure 6.28.12504

5.4.0-1064-aws 6.28.12504

5.4.0-1031-azure 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 241/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-59-generic 6.28.12504

5.10.0-1052-oem 6.35.13206

5.4.0-1085-azure 6.28.12504

5.8.0-1039-gcp 6.28.12504

5.4.0-1020-azure 6.28.12504

5.4.0-1078-gcp 6.28.12504

5.4.0-1034-azure 6.28.12504

5.4.0-1012-azure 6.28.12504

5.4.0-1022-aws 6.28.12504

5.4.0-1068-gke 6.34.13109

5.4.0-94-generic 6.28.12504

5.4.0-1057-gke 6.34.13109

5.11.0-1025-aws 6.34.13108

5.4.0-1059-aws 6.28.12504

5.13.0-23-generic 6.39.13601

5.11.0-44-generic 6.34.13108

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 242/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1032-gcp 6.28.12504

5.4.0-31-generic 6.28.12504

5.4.0-1051-gke 6.34.13108

5.4.0-1063-aws 6.28.12504

5.4.0-1068-azure 6.28.12504

5.4.0-105-generic 6.28.12504

5.4.0-1009-aws 6.28.12504

5.11.0-1029-gcp 6.34.13109

5.8.0-48-generic 6.28.12504

5.4.0-1059-gcp 6.28.12504

5.4.0-1030-aws 6.28.12504

5.4.0-65-generic 6.28.12504

5.4.0-1076-gke 6.34.13109

5.11.0-41-generic 6.33.13005

5.11.0-1016-aws 6.32.12904

5.4.0-71-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 243/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1037-gcp 6.28.12504

5.4.0-1049-azure 6.28.12504

5.8.0-1042-aws 6.28.12504

5.10.0-1029-oem 6.35.13206

5.4.0-1039-aws 6.28.12504

5.4.0-70-generic 6.28.12504

5.4.0-1035-gke 6.34.13108

5.11.0-1009-gcp 6.33.13003

5.4.0-1039-azure 6.28.12504

5.4.0-1062-gcp 6.28.12504

5.4.0-1072-aws 6.28.12504

5.4.0-1026-azure 6.28.12504

5.4.0-1023-azure 6.28.12504

5.13.0-41-generic 6.39.13601

5.10.0-1021-oem 6.35.13206

5.4.0-120-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 244/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-26-generic 6.28.12504

5.4.0-1054-gke 6.34.13108

5.8.0-36-generic 6.28.12504

5.11.0-1020-gcp 6.33.13003

5.4.0-52-generic 6.28.12504

5.4.0-1038-gcp 6.28.12504

5.4.0-1048-azure 6.28.12504

5.4.0-1049-gcp 6.28.12504

5.10.0-1022-oem 6.35.13206

5.4.0-1035-aws 6.28.12504

5.4.0-1080-gcp 6.28.12504

5.4.0-121-generic 6.28.12504

5.4.0-1044-azure 6.28.12504

5.4.0-1042-gke 6.34.13108

5.8.0-1041-aws 6.28.12504

5.4.0-1047-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 245/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1078-azure 6.28.12504

5.4.0-74-generic 6.28.12504

5.4.0-90-generic 6.28.12504

5.4.0-1064-gcp 6.28.12504

5.4.0-1046-gke 6.34.13108

5.4.0-1041-aws 6.28.12504

5.4.0-99-generic 6.28.12504

5.10.0-1017-oem 6.35.13206

5.10.0-1034-oem 6.35.13206

5.4.0-1056-gke 6.34.13108

5.4.0-64-generic 6.28.12504

5.8.0-1035-gcp 6.28.12504

5.4.0-1083-azure 6.28.12504

5.8.0-34-generic 6.28.12504

5.11.0-1009-aws 6.32.12904

5.11.0-1020-aws 6.32.12904

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 246/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1053-gcp 6.28.12504

5.11.0-1023-gcp 6.33.13005

5.4.0-54-generic 6.28.12504

5.4.0-113-generic 6.28.12504

5.4.0-88-generic 6.28.12504

5.4.0-1058-gcp 6.28.12504

5.4.0-1072-gcp 6.28.12504

5.4.0-1080-azure 6.28.12504

5.4.0-56-generic 6.28.12504

5.4.0-1033-gcp 6.28.12504

5.4.0-1019-gcp 6.28.12504

5.10.0-1057-oem 6.35.13206

5.13.0-48-generic 6.39.13601

5.4.0-1044-gcp 6.28.12504

5.4.0-1055-gke 6.34.13108

5.4.0-47-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 247/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1021-gcp 6.28.12504

5.4.0-1021-aws 6.28.12504

5.4.0-1075-aws 6.28.12504

5.4.0-1041-azure 6.28.12504

5.13.0-37-generic 6.39.13601

5.4.0-1037-aws 6.28.12504

5.4.0-89-generic 6.28.12504

5.4.0-1036-azure 6.28.12504

5.4.0-1052-gcp 6.28.12504

5.13.0-51-generic 6.39.13601

5.13.0-39-generic 6.39.13601

5.4.0-37-generic 6.28.12504

5.4.0-1065-azure 6.28.12504

5.4.0-1074-azure 6.28.12504

5.4.0-1009-gcp 6.28.12504

5.4.0-1061-aws 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 248/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1017-aws 6.28.12504

5.4.0-1054-aws 6.28.12504

5.4.0-81-generic 6.28.12504

5.4.0-1011-aws 6.28.12504

5.13.0-35-generic 6.39.13601

5.11.0-22-generic 6.32.12904

5.4.0-1071-gke 6.34.13109

5.8.0-49-generic 6.28.12504

5.4.0-1069-aws 6.28.12504

5.4.0-1051-aws 6.28.12504

5.4.0-1025-gcp 6.28.12504

5.4.0-96-generic 6.28.12504

5.4.0-1039-gke 6.34.13108

5.4.0-1065-gcp 6.28.12504

5.4.0-1067-gcp 6.28.12504

5.11.0-40-generic 6.33.13005

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 249/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.8.0-23-generic 6.28.12504

5.4.0-1070-azure 6.28.12504

5.4.0-1048-aws 6.28.12504

5.4.0-1055-aws 6.28.12504

5.4.0-1059-gke 6.34.13109

5.8.0-50-generic 6.28.12504

5.10.0-1019-oem 6.35.13206

5.4.0-1078-aws 6.28.12504

5.4.0-48-generic 6.28.12504

5.8.0-41-generic 6.28.12504

5.13.0-28-generic 6.39.13601

5.4.0-1025-azure 6.28.12504

5.11.0-1028-gcp 6.34.13108

5.4.0-1030-gcp 6.28.12504

5.4.0-1065-aws 6.28.12504

5.13.0-44-generic 6.39.13601

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 250/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-86-generic 6.28.12504

5.4.0-28-generic 6.28.12504

5.4.0-1033-gke 6.34.13108

5.8.0-59-generic 6.28.12504

5.4.0-1063-gcp 6.28.12504

5.4.0-1057-aws 6.28.12504

5.8.0-1038-gcp 6.28.12504

5.4.0-1022-gcp 6.28.12504

5.10.0-1038-oem 6.35.13206

5.10.0-1013-oem 6.35.13206

5.10.0-1016-oem 6.35.13206

5.4.0-1015-aws 6.28.12504

5.11.0-1014-aws 6.32.12904

5.4.0-1080-aws 6.28.12504

5.11.0-1021-aws 6.33.13005

5.4.0-117-generic 6.28.12504

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 251/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.4.0-1020-aws 6.28.12504

5.4.0-73-generic 6.28.12504

5.8.0-38-generic 6.28.12504

5.4.0-1073-aws 6.28.12504

5.4.0-84-generic 6.28.12504

5.4.0-1043-azure 6.28.12504

5.4.0-1041-gke 6.34.13108

5.4.0-45-generic 6.28.12504

5.4.0-42-generic 6.28.12504

5.4.0-1073-azure 6.28.12504

5.4.0-1040-gcp 6.28.12504

5.4.0-1029-gcp 6.28.12504

5.4.0-1062-gke 6.34.13109

5.4.0-1068-aws 6.28.12504

5.10.0-1049-oem 6.35.13206

5.11.0-36-generic 6.32.12904

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 252/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Kernel Minimum sensor version Last supported sensor version

5.8.0-55-generic 6.28.12504

5.4.0-1046-gcp 6.28.12504

5.4.0-1036-gke 6.34.13108

5.4.0-107-generic 6.28.12504

5.11.0-1026-gcp 6.34.13108

5.4.0-51-generic 6.28.12504

5.4.0-1036-gcp 6.28.12504

5.10.0-1050-oem 6.35.13206

5.13.0-40-generic 6.39.13601

Appendix B: Reduced functionality mode (RFM)

Reduced functionality mode (RFM) is a safe mode for the sensor that prevents compatibility issues if the host’s kernel is unsupported by the sensor. Both Windows
and Linux sensors can enter RFM, but RFM behaves differently on each platform. RFM is a protective state to prevent damage to incompatible hosts.

Hosts in RFM are unprotected by Falcon. When installing the sensor and upgrading hosts, ensure
that kernels are compatible. Check regularly to verify your hosts aren’t in RFM.

A sensor enters RFM when it’s installed on a host that has an incompatible kernel on a supported Linux distro. Sensors can enter RFM if their kernels are updated to
an unsupported kernel version.

What happens to sensors in RFM?

Linux sensors in RFM do very little, due to their strong dependency on the host's kernel. They don’t have detections or process execution events, but continue

sending SensorHeartBeat events to indicate that a sensor is installed on the host.

How can I tell if my sensor's in RFM?

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 253/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

From the Host management page

On the Host management page (Hosts > Host management [/hosts/hosts] ), you can filter your list of hosts to show devices currently in RFM. You can also see the
RFM status of a specific host from the host’s summary panel [/documentation/67/host-and-host-group-management#view-host-summary-panel] . If a host is in RFM
or has an unknown RFM status, a warning banner alerts you at the top of the panel.

Linux hosts in RFM include an additional troubleshooting link next to the RFM status on the host summary panel. This link retrieves the minimum base sensor version
required for the kernel running on the device. If the kernel version is supported by either zero-touch Linux (ZTL) or the zero-touch Linux module, the minimum sensor
version required and its delivery method (such as ZTL or ZTL Module) also display.

From the Executive Summary dashboard

The Executive Summary [/dashboards/dashboard/en-US/app/eam2/dashboards__executive_summary] dashboard (Dashboards and reports > Dashboards > Legacy
dashboards) lists a count of sensors in RFM by operating system. You can click an RFM widget in the dashboard to open more details in Investigate.

From Investigate

Linux hosts generate a SensorHeartBeat event, which contains the value SensorStateBitMap_decimal . In Investigate [/investigate/events/en-

us/app/eam2/search] , you can use this value to determine if the sensor is in RFM.

If SensorStateBitMap_decimal is 2 , the sensor is in RFM.

If SensorStateBitMap_decimal is 0 , the sensor isn’t in RFM.

You can also run the following search query in Investigate to list Linux hosts reporting an RFM state within the last day.

event_simpleName=SensorHeartbeat event_platform=Lin SensorStateBitMap_decimal=2

ConfigIDBuild_decimal>=3904 earliest=-1d latest=now | table timestamp ComputerName aid
ConfigIDBuild_decimal | dedup aid | sort -timestamp | eval timestamp=timestamp/1000 | convert
ctime(timestamp) | rename timestamp as "Timestamp (UTC)", ComputerName as "Hostname", aid as
"Sensor ID", ConfigIDBuild_decimal as "Agent Build"

You can modify the query reporting period, however we recommend searching no more than 2 days back. If a host was previously in RFM but has since
been fixed, you will still see the events that predate its repair.

From the API

RFM status information is also available through the CrowdStrike Host management API [/documentation/84/host-and-host-group-management-apis#getting-info-
about-hosts] .

From the CLI

You can run the following command in your terminal to verify RFM status:

/opt/CrowdStrike/falconctl -g --rfm-state

Returning an RFM sensor to full functionality

Upgrade the sensor to a version that supports your installed kernel, or change the host’s kernel to one supported by the sensor. While newly released long-term
support (LTS) kernels for supported distros aren’t immediately compatible with the sensor, we add support as quickly as possible. For more info about sensor versions
that support specific kernels, see Linux Supported Kernels [/documentation/245/linux-supported-kernels] .

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 254/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

To prevent existing sensors from entering RFM, we recommend disabling automatic kernel updates and upgrading your kernel when it is supported by the Falcon
sensor. Consult your distro’s support documentation for pinning the existing kernel or configuring regular updates to leave the existing kernel in place.

Need additional support?

For additional troubleshooting information or to open a support case, visit our Support Portal [https://supportportal.crowdstrike.com/] .

Appendix C: Falcon-Kernel-Check tool

The falcon-kernel-check tool ensures the Falcon sensor will be fully operational on a host by verifying host kernels are compatible with the Falcon sensor base

package installation. It’s intended to be run before the sensor is installed. If a kernel is incompatible, the sensor might still install on a host but will be in Reduced
Functionality Mode (RFM) [https://supportportal.crowdstrike.com/s/article/Reduced-Functionality-Mode-for-Linux-Sensors] . While in RFM, the sensor is in a safety
mode that protects it from severe compatibility errors. The sensor generates a heartbeat event, but does not perform any monitoring or prevention actions.

Falcon sensor for Linux version 5.38 and later includes a feature to add support for new kernels without requiring a sensor update. Support for new kernels is added
through Zero Touch Linux (ZTL) channel files that are deployed to hosts. The falcon-kernel-check tool currently only verifies kernel support for the initial release of
the sensor version. As a result, kernel support that has been added through channel files for a sensor version are not reflected in the results of the falcon-kernel-
check tool. For an up-to-date list of kernel support, including kernel support added through channel files, see Linux Supported Kernels [/documentation/245/linux-
supported-kernels] .

For hosts with the sensor already installed, verify kernel compatibility by checking RFM status. Run this command on the host:

sudo /opt/CrowdStrike/falconctl -g --rfm-state

For more info about RFM status, see Appendix B Reduced Functionality Mode (RFM) [/documentation/20/falcon-sensor-for-linux#how-to-tell-rfm] .

For more info about the ability to add support for new kernels through ZTL channel files, see the release notes for the Falcon sensor for Linux version 5.38.10402
[/support/news/94849] .

Before you begin

Download the appropriate sensor package for your host from Host setup and management > Deploy > Sensor Downloads [/hosts/sensor-downloads] .

New kernel support is added regularly, so it is important to ensure that you have the latest
sensor installer before running falcon-kernel-check.

Requirements
Sensor support:

Falcon sensor for Linux version 4.25.7103 and later

System requirements:

Supported Linux distro

Rpm2cpio (RPM-based distros only)

Extracting the tool

Follow the appropriate extraction instructions for your distro:

RPM-based distros:
https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 255/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

$ mkdir -p /tmp/crowdstrike
$ rpm2cpio <installer_filename>.rpm | (cd /tmp/crowdstrike; cpio -idv)

DEB-based distros:

$ mkdir -p /tmp/crowdstrike
$ dpkg -x <installer_filename>.deb /tmp/crowdstrike

Checking kernel compatibility

The falcon-kernel-check tool can be used two ways.

To check the host's active kernel, run falcon-kernel-check<build> with no parameters

$ falcon-kernel-check<build>

Host OS 3.10.0-957.1.3.el7.x86_64 is supported by Sensor version 7103.

To check any other kernel, run falcon-kernel-check with the -k parameter. For example:

$ falcon-kernel-check<BuildNumber> -k 3.10.0-957.1.3.el7.x86_64

3.10.0-957.1.3.el7.x86_64 is supported by Sensor version 7103.

Where <build> is the sensor build, which you can view on the Downloads page:

If a kernel version is available in multiple distributions, falcon-kernel-check displays the list of all kernels that match the specified parameter. For example:

$ falcon-kernel-check<BuildNumber> -k 4.4.0-31-generic
4.4.0-31-generic matches:
4.4.0-31-generic #50~14.04.1-Ubuntu SMP Wed Jul 13 01:07:32 UTC 2016
4.4.0-31-generic #50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016

Command-line options

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 256/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

Usage: $ falcon-kernel-check<BuildNumber> [options]

-h print usage.
-v print version.
-k input kernel release to see if it is supported.

<NODE_NAME> - Refers to the kubernetes node on which the command should be executed

<IMAGE_REPO> - Refers to $FALCON_IMAGE_REPO

<IMAGE_TAG> - Refers to $FALCON_IMAGE_TAG

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 257/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 258/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 259/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 260/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 261/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 262/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 263/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 264/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 265/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 266/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 267/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 268/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 269/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 270/271
01/07/2022, 12:12 Falcon Sensor for Linux Deployment | Documentation | Support and resources | Falcon

https://falcon.crowdstrike.com/documentation/20/falcon-sensor-for-linux 271/271