datadog Nov 18, 2025 Scaling real-time file monitoring with eBPF: How we filtered billions of kernel events per minute (opens in new tab) database-designlinuxebpfsecurity-monitoringevent-processingfile-integrity-monitoringinotifyauditd