Original ProcMon used ETW, Event Tracing for Windows; the analogous technology (although very different in style) on Linux is eBPF so that’s what this tool uses.
This file says it does, though only for network events: https://documentation.help/Process-Monitor/documentation.pdf