Under the hood that uses eBPF handlers for the sys_enter and sys_exit tracepoints https://github.com/microsoft/ProcMon-for-Linux/blob/main/src/tracer/ebpf/ebpf

Under the hood that uses eBPF handlers for the sys_enter and sys_exit tracepoints https://github.com/microsoft/ProcMon-for-Linux/blob/main/src/tracer/ebpf/ebpf_tracer_engine.cpp#L76 https://github.com/microsoft/ProcMon-for-Linux/blob/main/src...