How to catch crypto miners using syscall signatures

Hi, author of the post and Modal engineer here in case anyone has any questions. Also got Twitter DMs open if you've got some detection tips and tricks of your own :)