How would you describe them?
An eBPF based agent that runs in the kernel space to block actions based on a policy
