Understand what is "OS Awareness" and why it is useful. It features a set of APIs to track process/thread creation, deletion and activity, abstracting away low level details.
You have to configure your system for OS awareness, before you can use OS awareness tools. Start here to learn how to setup your environment for OS awareness.
There are many different types of event notifications for OS awareness, and it is useful to know when they are useful and why.
Know when an image (e.g. a shared library) is loaded or unloaded in a guest processes' virtual memory.
Get notifications whenever the guest OS functions are invoked by the guest processes.
Signals are a critical part of OS behavior, and Ztools can track when signals are generated and triggered in the guest OS.