Auditd syscall for rclone

Hii guys

I am testing out auditd on a ubuntu server and trying to identify the syscall for rclone.

And help appreciated :slightly_smiling_face:

Do you need to find every syscall rclone uses? I can't think of a way of doing that without just stracing the job you want to do. I'm not familiar with auditd - is there a way of doing that within its framework?