Linux syscall-level intrusion detection system using ptrace. Monitors processes in real time and alerts on suspicious behaviour including privilege escalation, shellcode injection, fork bombs, and ...