Reusing Hardware Performance Counters to Detect and Identify Kernel Control-Flow Modifying Rootkits
Nitro: hardware-based system call tracing for virtual machines