Kernel Hook Module (KHM) is a kernel module for ServerProtect and it supports the real-time scan feature. You can use the same general procedure for building a kernel module to build the KHM on your Linux system. Command line examples are provided in this document.
The following is an overview of the process: