Companion code for the "Monitoring Linux events" Empire Hacking talk - trailofbits/monitoring_linux_events