Comment by sYnfo

You might find the syscall tracing functionality of Cirron useful: https://github.com/s7nfo/Cirron