syscalltrack's Kernel Modules syscalltrack contains 2 kernel modules - 'syscall_hijack.o' and 'sct_rules.o'. The first handles system call 'hijacking' (that is, replacing a system call with another function). The last does the tracking operation itself. The split into two modules is done to avoid race conditions inherent to the use of modules in tracked code. More about this later.