Snoopy-eBPF: Catching Program Executions with eBPF

companion blog post

Example

Run snoopy and type ls in another terminal, you will get the process's tid and name that executes the ls program, as well as the arguments passed to the program.