TEMU is a tool based on QEMU that is (was?) aimed at doing exactly that, a dynamic analysis that captures instructions executed in every process (including the

TEMU is a tool based on QEMU that is (was?) aimed at doing exactly that, a dynamic analysis that captures instructions executed in every process (including the kernel): http://bitblaze.cs.berkeley.edu/temu.html http://bitblaze.cs.berkeley.edu/temu.html The problem of course is that this is not analyzing the physical machine but rather the behavior of programs in a virtual environment.