Event-Based Tracing Foundations

Explain how event-based tracing captures kernel function entry and exit without modifying source code.