A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines - View it on GitHub