Update procmon architecture
Hi, in this MR, I decided to change the approach of registering hooks for linux and bring procmon to the way plugins are made for windows.
createSyscallHook() - makes it easy to register a hook, since you will not need to copy the code every time to search for a symbol in a new plugin, which can be represented in kernel symbols such as do_execveat_common.isra.?? or <symbol_name>.isra.??.
The display_name field has also been added to the createSyscallHook, as this will allow some function names to be represented in a more readable format.
For example, instead of __send_signal, the user will be given send_signal, etc.
Can one of the admins verify this patch?
@drakvuf-jenkins Test this please
@drakvuf-jenkins Retest this please
@drakvuf-jenkins Retest this please
@drakvuf-jenkins Test this please
@drakvuf-jenkins Retest this please
Thanks!