# Glossary

| Term | Definition |
|------|------------|
| **ClamAV** | Open-source antivirus engine used for signature-based malware scanning. |
| **Custom Scan** | User-selected folder scan (as opposed to Quick or Full). |
| **Full Scan** | Scan of the entire `C:\` drive. |
| **HIBP** | Have I Been Pwned — breach database used for k-anonymity password checks. |
| **IPC** | Inter-Process Communication between Electron renderer and main process. |
| **k-anonymity** | Privacy technique sending only a hash prefix so the full password/email is never transmitted. |
| **LOLBins** | Living Off the Land Binaries — legitimate Windows tools abused by malware. |
| **NSIS** | Nullsoft Scriptable Install System — Windows installer format used by Soterios. |
| **Quick Scan** | Targeted scan of high-risk temp and startup locations. |
| **Quarantine** | Isolated storage for detected threats, preventing execution while allowing restore. |
| **Real-Time Protection (RTP)** | Windows Defender feature that monitors files and processes as they run. |
| **Risk score** | Heuristic rating assigned to processes based on path, name, and behavior signals. |
| **Secure Boot** | UEFI feature verifying boot loader signatures before OS startup. |
| **UAC** | User Account Control — Windows prompt requiring approval for elevated actions. |
| **XposedOrNot** | Public email breach lookup API used optionally by Soterios. |