1. A method comprising: executing, within the kernel of an operating system a kernel extension module representing a subsystem of the operating system; the kernel extension module maintaining a plurality of sub-modules wherein each sub-module is configured to detect one or more conditions and cause execution of one or more corresponding actions when the one or more conditions are met; the kernel extension module receiving a request to perform a task on behalf of a first application, wherein the kernel extension module defines one or more default actions for the task that are different than the one or more corresponding actions; in response to a determination that the request meets the conditions of a particular sub-module, the kernel extension module performing the particular sub-module's corresponding actions in addition to the default actions; wherein the corresponding actions of the particular sub-module involve collecting information related to the subsystem's performance of the default actions; storing at least the collected information in a memory location that is accessible to a second application; wherein the method is performed by one or more computing devices.