ArchGuard. A kernel-mode architectural integrity auditor for Windows x64. Validates critical hardware registers (MSR_LSTAR, IDTR, CR4) against kernel memory boundaries to detect low-level hooks and rootkit compromises.