Abstract: Embodiments are disclosed for techniques to detect electronic system modification. The techniques include causing an electronic system to perform a predetermined set of routines. The techniques also include generating field scans of the electronic system while the predetermined set of routines is performed. The techniques further include comparing the field scans to baseline scans of the electronic system. Additionally, the techniques include determining that one of the field scans and one of the baseline scans are different. Further, the techniques include identifying at least one difference between the one field scan and the one baseline scan.