0xbt

With a kernel module, you add some code to the kernel that executes as part of the kernel and becomes as powerful as the rest of the it - allowing you to do things like see all the syscalls coming in, plus any other capabilities you might want.