4 ms·
Open source tools and standards to lookup known files
- gallypette 4y agoShameless plug: I wrote a small poc module to use hashlookup's bloom filter (https://github.com/hashlookup/a-ray-grass/ https://github.com/hashlookup/a-ray-grass/) in yara (https://github.com/VirusTotal/yara https://github.com/VirusTotal/yara). The idea is to easily discard files that are known to be safe and so to avoid launching thousands of yara rules on a file for nothing. One can also use it to keep track of some files that meet certain conditions for instance. The module can store any string in these filters so I see a lot of useful use-cases for this little thingy :) edit: forgot the link duh.
- majkinetor 4y agoTake a look at trid. https://www.mark0.net/soft-trid-e.html https://www.mark0.net/soft-trid-e.html