Started docu of sys call table rootkit