The boundary between user space and kernel space. Learn raw syscalls, ptrace for tracing, system call interception, and kernel entry points.