DriverScope scans Windows kernel drivers for BYOVD-relevant imports, IOCTL dispatch surfaces, and runtime clues from Speakeasy emulation. The repo is useful because it keeps separating candidate discovery from proof, especially with its warning that a wired IOCTL is not the same thing as a reachable kernel primitive.