more rootkit doc progress. need to add resources. beginning keylogger docs.