Chapter 5: OS Instrumentation
Observe and modify simulated guest OS behavior.
Intel SAE comes with APIs that make it easy to observe the behavior of the simulated guest operating system (and its processes).
You can use the available high-level APIs to track guest OS functions that are executed, track processes and threads as they are created and destroyed etc. Get detailed information, such as process and thread IDs or the symbolic name of the process.
Only supports the Linux operating system. Extensible to other operating systems through user-defined ztool APIs