Trust Anchor IOC Scanner — Indicator of Compromise Detection
Abstract
ioc_scanner.py scans systems for indicators of compromise related to BPO attacks. Detection Capabilities NVRAM key detection (seedTs, boot-breadcrumbs, IDInstallerDataV2, wlancprops) Suspicious file path scanning Process pattern matching Network indicator detection Hash-based malware scanning Part of the Trust Anchor framework for persistent threat environments.
Fields of Study & Subjects
Security and Verification in Computing
Digital and Cyber Forensics
Advanced Malware Detection Techniques
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 10 January 2026