Module cpu_pinning 

CPU affinity / cryptominer detection via scheduling policy and CPU pinning.

Functions

is_suspicious_pinning

Classify whether a CPU affinity mask is suspicious by comparing it against the expected (system-wide) mask.

scan_cpu_pinning

Scan for processes with suspicious CPU pinning (potential cryptominers).