probe::kprocess.create(3) Fires whenever a new process or thread is successfully created

SYNOPSIS


kprocess.create

VALUES

new_pid

The PID of the newly created process

new_tid

The TID of the newly created task

CONTEXT

Parent of the created process.

DESCRIPTION

Fires whenever a new process is successfully created, either as a result of fork (or one of its syscall variants), or a new kernel thread.