And, as pointed out in its documentation, there are things it cannot catch. The most common of which are system calls.