LKMGuard - Linux kernel module Done: Syscalls integrity Syscalls hooks with ftrace Keylogger (now - only printk to dmesg) To do: eBpf Memory integrity Sort-of av functional may be