Hungarian security researchers have revealed that the NSA dump includes scripts and scanning tools the agency uses to track operations of hackers from other countries. NSA’s specialized team known asTeDi developed the tools that help the agency to detect other nation-state hackers on the targeted machines it infects. NSA hackers used these tools to scan targeted systems for ‘indicators of compromise’ (IoC) in order to protect its own operations from getting exposed, as well as to find out what foreign threat actors are stealing and which hacking techniques they are using.
Source: https://thehackernews.com/2018/03/nsa-hackers-tracking.html