Sebek2 - A Kernel-based Data Capture Tool
LogError writes "Sebek is a piece of code the lives entirely in kernel space and records either some or all data accessed by users on the system. This paper is a detailed discussion of Sebek, how it works and its value."
Sounds Vulcan.
1) Beer.
2) Cops (on TV)
3) Food. p All I need on a Saturday evening.
Yet, here you are, posting on Slashdot