1. A host system comprising a hardware processor and a memory, the hardware processor configured to execute a notification handler and a computer security program, the hardware processor further configured to: receive from the memory an event notification instruction forming part of a currently executing process, wherein execution of the process causes an occurrence of a trigger event, wherein the event notification instruction comprises an operator field and an operand field, wherein the operand field comprises an identifier of an event type of the trigger event; in response to receiving the event notification instruction, suspend execution of the process; and in response to suspending execution of the process, switch to executing the notification handler, wherein the notification handler is configured to: determine whether an event eligibility condition is satisfied according to the event type of the trigger event, in response, when the event eligibility condition is satisfied, insert an event indicator into an event queue, the event indicator indicative of the trigger event, and in response to inserting the event indicator into the event queue, instruct the hardware processor to resume execution of the process, and wherein the computer security program is configured to: in response to the hardware processor resuming execution of the process, remove the event indicator from the queue, and determine according to the event indicator whether the occurrence of the trigger event is indicative of a computer security threat.