HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP
https://github.com/Dec0ne/HWSyscalls/
https://0xdarkvortex.dev/hiding-in-plainsight/
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls.
https://github.com/jthuraisamy/SysWhispers
https://redops.at/en/blog/exploring-hells-gate