Detects attempts to record audio using the arecord and ecasound utilities.
Read the full analysis on IntelFusions