Added auditRuleSyscallData and its supporting function , althought he code is not tested