Hexec can be used to hook into exec system calls. It evaluates a user defined expression against all hooked exec calls. This expression can contain simple path checks (e.g. -path "*/name") and even complex bash scripts.