1. A machine-implemented method for intercepting computing device system calls, the computing device including a kernel including a system call table, the method comprising: executing a hypervisor on the computing device, the hypervisor configured to control at least one computing device processor register, the at least one computing device processor register configured to be used by the kernel; creating at least one modified kernel structure, the modified kernel structure including a modified system call table; determining a memory address of an original system call handler, the original system call handler configured to receive and execute kernel operation commands; determining a size of a loaded image of the original system call handler; creating a copy of the original system call handler as a second system call handler; and intercepting, by the second system call handler as directed by the hypervisor, a computing device system call.