When using auditd w/utility this command will bring up a list of all system calls being made
Code:
aureport --start today --syscall
If you want to see failed system calls
Code:
aureport --start today --syscall --failed
If you want to see events
Code:
aureport --start today --event
And a handful of other things --
To list services/modules loaded in kernel just do: