Add proper include and fix brackets on macro
Let osquery core do the integer cast for syscall_addr_modified