Develop a UI that runs on a Host or Guest that makes use of the Tuzel libraries, A very simple one that maybe shows a status in the toolbar, red/green/yellow.
Green signifying that there is no suspicious activity happening at the hypervisor/hardware level.
Red signifying that there is some suspicious activity happening at the hypervisor/hardware/introspection layer. And it is highly concerning.
Yellow signifying that there is some suspicious activity happening at the Hypervisor/hardware/Introspection layer. And it is mildly concerning.
The application should log activity to syslog, and be able to forward the information to a syslog server.
You need to be an expert at writing software at OS kernel level, in whatever language is best suited for the Operating System and the Tuzel libraries.