Single-process process and syscall monitor