Seems very promising!! I am not very advanced on what ebpf can't and its limit... Is the agent could replace another siem agent (I think about wazuh agent) or it is a complementary agent to send more data to the siem tool (or another log analysis tool)