Companion code for the "Monitoring Linux events" Empire Hacking talk - View it on GitHub