A simple implementation of Apple's Endpoint Security Framework to monitor a single process and its child process.
You need the Apple's Endpoint Security Entitlement from apple, you can make the request here. Alternatively, you can disable SIP temporarily.
Check releases page for complete release history and note.