On macos we get things like file integrity monitoring and process events with user land APIs, and I believe we can on Windows also, but I'm wondering what else you'd want