Add a new signature module for detecting bootkit installation, reset handle state on stealth_file module when we're inspecting a new process