This looks great. Hopefully this can be configured to set off a big fat alarm if any unexpected syscalls get called. Will be a huge security win.