By tracing processes using Linux eBPF (Berkeley packet filter) technology, Tracee can correlate collected information an