Comment by brutopia

How does it trace syscalls on macos? Do you need to disable SIP?