CamFlow

Practical whole-system provenance capture for Linux.