The aim of this research is to assess the best way to gather system calls when trying to detect malware. This research performs an extensive analysis on data collected from user-level and data collected from kernel-level in order to determine which is better suited to classifying malware.