What events are you looking for? I ask because there are multiple APIs used and some may expect root, we can investigate the docs and code together.

process, socket, hardware, file, user