Linux x86-64 system call instrumentation via memory-indirect calls

The author explores instrumenting system calls on Linux/x86-64 using memory-indirect calls. The technique redirects syscall dispatch through indirect call instructions rather than traditional hooking methods. Part one covers the implementation approach and initial challenges encountered with this instrumentation strategy.