usermode thread hijacking detection via working set page fault monitoring - View it on GitHub