Common Event Grammar › Host Security Category › Kernel and OS Activity › System Call Notification Action

System Call Notification Action

The System Call Notification action expresses information on notifications and messages generated by a system call. A system call is a request made by any program to the operating system for performing tasks. System calls provide the interface between a process and the operating system. You can map any type of system call notification to this action if the event cannot be mapped to a more specific action. Use the System Call Status action if the event describes the status of a system call.