hi. To generate process events the kernel module is not needed, right? audit conf is enough?