As you know, Q references the Keystone several times. With all the news about Delaware County PA, the Keystone State is in the news.
One that really jumped out at me was Q 2998. Q posts an anon who stumbled upon Keystone, an application described in Wikileaks' Vault 7 dump.
Keystone is part of the Angelfire project. it is a persistent framework that can load and execute custom implants on target computers running the Microsoft Windows operating system (XP or Win7).
Well, that's interesting. This tool may not work with Win10. Is this even relevant?
Delaware County PA bought new voting in early 2020, in order to be prepared for the most secure election in history. They put the machines on display.
Notice that they are using HART VERITY 2.3.4. Like any good piece of software, it's documented. Go to Page 5 and check the Operating System - it's Win 7.
Microsoft ended support for Windows 7 on January 14, 2020. So riddle me this...who in their right mind would buy a computer that already has a vulnerable and unsupported OS? And why wouldn't a vendor be able to offer Windows 10 at this point, which was launched in July 2015?
Angelfire tools start with Solartime, which modifies the partition boot sector so that when Windows loads boot time device drivers, it also loads and executes the Wolfcreek implant, that once executed, can load and run other Angelfire implants.
I think I remember something about forensic examinations of machines finding modified boot records. But the search here sucks and I can't verify this. Do any of you remember anything like that? Got a source?
Now back to Keystone:
Keystone is part of the Wolfcreek implant and responsible for starting malicious user applications. Loaded implants never touch the file system, so there is very little forensic evidence that the process was ever ran. It always disguises as "C:\Windows\system32\svchost.exe" and can thus be detected in the Windows task manager, if the operating system is installed on another partition or in a different path.
Is this how voting records get changed? And if so, does the CIA control elections?
Anyway...just spitballing some loose connections I came across. Feel free to add your own analysis.
Pretty sure Q called No Name the keystone to the Russian hoax.