syscall-trace

DYNAMIC: run a target under a syscall tracer (strace on Linux, dtruss on macOS) and summarize its behaviour — files opened, network connects, processes exec'd, and a syscall histogram. EXECUTES the target; consent-gated. dtruss needs root + a permissive SIP.

Independent GitHub snapshot · Automated classification · Original documentation governs