I tried looking it up but failed to find any technical write ups of how this was done, do you have any links maybe? Super interesting to read.
https://projectzero.google/2021/12/a-deep-dive-into-nso-zero...
https://projectzero.google/2021/12/a-deep-dive-into-nso-zero...