diff --git a/scripts/bpf/syscalls.bt b/scripts/bpf/syscalls.bt
new file mode 100644
index 000000000..3c8cd70bc
--- /dev/null
+++ b/scripts/bpf/syscalls.bt
@@ -0,0 +1,3 @@
+tracepoint:syscalls:sys_enter_* /pid == __PID__/ {
+	@syscall[probe] = count();
+}