Hardware-assisted rootkits: abusing performance counters on the ARM and x86 architectures
Cloaker: Hardware Supported Rootkit Concealment