ProcMon for Linux

Forensics & Incident Response

A Linux‑based system call tracing tool that reimagines Windows Procmon for monitoring process activity on Ubuntu

Track releases GitHub

C Latest 2.2.1 · 2mo ago Security brief →

Features

Traces syscall activity of specified processes
Supports filtering by PIDs and event types
Offers headless mode to capture events to a database file
Provides a TUI for interactive inspection of trace files

Recent releases

View all 2 releases →

2.2.0 Breaking risk 4mo

Breaking changes

Removed the shell.c source file

Full changelog

Changes:

Update SQLite dependency (#143)
Continue to back away from the LEFT JOIN optimization of check-in [41c27bc0ff1d3135] by disallowing query flattening if the outer query is DISTINCT (#139)
Remove shell.c (#138)

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Releases

View all →

Releases per month

Cadence 0.1 / wk

Last release 80d

Tracked 2

Security

Full profile →

Security score 6.7/10

OpenSSF 5.8/10

Open CVEs 0

SECURITY.md

Community

GitHub stars 4,703

Forks 290

Contributors 90d 0

Open issues 31

Open PRs 6

Stars/wk velocity 0.0

HN peak 232

About

Stars

4,703

Forks

290

Languages

C C++ CMake

View on GitHub

Install & Platforms

Platforms

linux

Similar tools

Sysmon for Linux

Rizin

Radare2

CAPA

Umbraco