# special tools

## bpftrace

[homepage](https://bpftrace.org/) [docs](https://github.com/bpftrace/bpftrace/blob/master/man/adoc/bpftrace.adoc)

```bash
sudo bpftrace --unsafe -e 'tracepoint:signal:signal_generate /args->sig ==9/ {
printf("SIGKILL: target pid=%d sender pid=%d processname=", args->pid, pid);
system("ps -p %d -o comm | sed -n \"2 p\"", pid);
}'
```