The invention relates to the technical field of processes, and discloses a process tracking method, device and equipment and a storage medium, the method comprises the following steps: responding to any process of an application program to enter a
system call, triggering a first tracking point, and obtaining a
system call number; based on the first tracking point and the
system call number, collecting first information that the process enters
system call; in response to the process exiting the
system call, triggering a second tracking point; based on the second tracking point, collecting second information that the process quits the
system call; a process of the application is tracked based on the first information and the second information. By comparing the information before and after the system calling, the change before and after the system calling can be accurately detected, the comprehensive tracking of the system calling process of the process is realized, the safety of the system is enhanced, and meanwhile, when the system is abnormal or has a safety problem, the reason of the problem can be quickly positioned through the records, so that the safety of the system is improved. And
troubleshooting and repairing are facilitated.