Detecting sys_call_table modificationsAn example of validating the integrity of a syscallKernel function trampolinesExample of function trampolinesAn example code for hijacking sys_write on a 32-bit kernelDetecting function trampolinesAn example with the ret instructionAn example with indirect jmpAn example with relative jmpInterrupt handler patching – int 0x80, syscallDetecting interrupt handler patching