nullshit Simple Null's driver detector for info the function that get hooked to do a syscall to manual map your driver will get detected by this if it uses a simple jmp code