Integration of Syscheck with eBFP to capture who-data

[vikman90]

eBPF is only supported on Linux kernel 3.18 and newer.

• Integrate BCC to project compilation.
• Generate BPF code and load monitoring events from syscheck configuration.
• Read and parse generated events.
• Use thread to execute realtime scan with eBPF.
• Change to Inotify when eBPF fails during execution.

This issue depends on #756.