Currently the twin duck firmware (Special Request 1) activates the payload whenever it detects that any of the LED (CapsLock, NumLock etc..) is turned on, which in other words "activates automatically since NumLock is turned on by default".
Is there a way to save the current LED state during plugging and execute the payload only when the state changes?