PoC capable of detecting manual syscalls from usermode. - View it on GitHub