[johnzabroski]

Windows supports eBPF. CrowdStrike was written before that supports existed, though.

[simiones]

A badly written eBPF program at this level could still prevent you from using your computer though. Not in this specific way, but if you use eBPF to prevent other things from running, and you accidentally deploy an eBPF program that, say, triggers on every process start - then you'll prevent every process from running, and the machine will be just as useless as one that doesn't boot at all.

[studmuffin650]

Also eBPF is still in beta for windows and is nowhere near parity with Linux.