Documentation made easier
probe::kprocess.create − Fires whenever a new process or thread is successfully created
kprocess.create
new_pid
The PID of the newly created process
new_tid
The TID of the newly created task
Parent of the created process.
Fires whenever a new process is successfully created, either as a result of fork (or one of its syscall variants), or a new kernel thread.
tapset::kprocess(3stap)