Anti-virus tool Crowdstrike not detected

Describe the bug Crowdstrike "recently" transitioned from being a kernel module to using the BPF system. As part of this transition the executable/process name changed from "falcon-sensor" to "falcon-sensor-bpf".

Lynis is specifically checking for the string "falcon-sensor" and not "falcon-sensor-bpf".

This causes Lynis to fail MALW-3280 despite CrowdStrike actually being installed and running.

Version

• Distribution = Ubuntu 24.04
• Lynis version 3.0.9 (although I checked the git repo for 3.1.4 and it looks like it is still affected)

Expected behavior Lynis should check for the process string "falcon-sensor-bpf" either in addition to, or instead of "falcon-sensor" - I guess people might still be running the old kernel module version of CrowdStrike so in-addition-to would be the safer approach

Output Log output (timestamps removed):

... Test: checking process falcon-sensor (CrowdStrike)
... Performing pgrep scan without uid
... IsRunning: process 'falcon-sensor' not found

Command prompt output of "ps" command:

$ ps -o args= -C falcon-sensor
$
$ ps -o args= -C falcon-sensor-bpf
falcon-sensor-bpf
$

Additional context I'm not sure exactly which version of CrowdStrike this change was made in. I didn't think this part was specifically relevant.