Respectfully submitted for evaluation and comments...
Kernel Generalized Event Management (KGEM) is an experimental facility for
collecting kernel events and managing user mode applications that are
interested in these events. A kernel event can be anything that happens in the
kernel that an application may be interested in, such as a file being opened, a
program being executed, a process being created, etc. KGEM provides a
structure for defining these events and delivering them to listening
applications in user space.