pmon Linux process monitoring (exec, fork, exit, setuid, setgid) References: Original Article The proc connector and socket filters StackOverflow: Detect Launching of programs exec notify Kernel connector