Nomad

Uses known methods to find mapped kernel code and suspicious threads