diff --git a/observation/src/threadsnoop/threadsnoop.h b/observation/src/threadsnoop/threadsnoop.h
new file mode 100644
index 0000000000000000000000000000000000000000..1d1416e0ae2f158c85851cb30655aa70e318c2f6
--- /dev/null
+++ b/observation/src/threadsnoop/threadsnoop.h
@@ -0,0 +1,14 @@
+// SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause)
+#ifndef __THREADSNOOP_H
+#define __THREADSNOOP_H
+
+#define TASK_COMM_LEN	16
+
+struct event {
+	pid_t pid;
+	char comm[TASK_COMM_LEN];
+	__u64 function_addr;
+};
+
+#endif
+