How to turn any syscall into an event: Introducing eBPF Kernel probes
blog.yadutaf.fr