define kernel event v1

Signed-off-by: rcohen <rcohen@armosec.io>