3 ms·
How were the words selected for the regex? It's interesting that "pass" is not there and breaks detection in your first link, but I assume they were chosen base
by alias_neo 4y ago
How were the words selected for the regex? It's interesting that "pass" is not there and breaks detection in your first link, but I assume they were chosen based on the statistics?
Is it covered by a different rule perhaps?
- zricethezav 4y ago`pass` by itself might introduce false positives. `passwd` and `password` are common and more likely to be in the ROI of a secret. That said, I'm not opposed to `pass` by itself. I'll have to think about this one... > but I assume they were chosen based on the statistics? Nope, not statistics. Identifiers and keywords are chosen based on what I see out in the wild being a software engineer.