I think it's easier to put the entire system into the reverse debugger. The downside is some complexity seeing into the system to view individual processes. Her

I think it's easier to put the entire system into the reverse debugger. The downside is some complexity seeing into the system to view individual processes. Here is one such tool: https://www.raytheonintelligenceandspace.com/capabilities/products/dejavm https://www.raytheonintelligenceandspace.com/capabilities/pr... An extra benefit is that you can reverse debug the kernel.