drop binary · detect rust + bring-your-own-vulnerable-driver patterns · runs locally
rust strings + BYOVD driver names · campaign keyword refs
heuristic screener · parses exports locally · not definitive proof