Added findevil APC detection

[thejanit0r]

Added a detection to detect the usage of user-mode APCs for hiding beacons from memory scanners (sleeping beacons).

Additional information about APCs and their implementation in a sleeping beacon:

• https://repnz.github.io/posts/apc/user-apc
• https://repnz.github.io/posts/apc/kernel-user-apc-api
• https://github.com/kyleavery/AceLdr (Sleeping Beacon)

Contributed under the BSD 0-Clause License (0BSD)