On intercepting syscalls on Linux

Intercepting syscalls has many usecases. But which one is best in which situation?