Oh you've gotten lucky then. Or somehow disabled crowdstrike.
https://www.crowdstrike.com/en-us/blog/crowdstrike-supports-...
They happily implement a userland version on macOS, but then claimed that being in the kernel is absolutely necessary on Windows after they disabled all Windows machines using it.
