EarlyBird: a poc of using the tech with syscalls on powershell.exe ...