Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

improve Rust identification #912

Merged
merged 2 commits into from
Nov 24, 2023
Merged

Conversation

mr-tz
Copy link
Collaborator

@mr-tz mr-tz commented Nov 22, 2023

No description provided.

@mr-tz mr-tz requested a review from Arker123 November 22, 2023 16:31
Copy link
Collaborator

@Arker123 Arker123 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Considering the reliability, wouldn't prioritizing hash searches over strings be a more robust approach?

@mr-tz
Copy link
Collaborator Author

mr-tz commented Nov 23, 2023

What do you mean by reliability?

@Arker123
Copy link
Collaborator

I meant that when considering reliability, I thought prioritizing hash searches over strings might be more robust. My intuition is that the string 'rust' could appear in many files, whereas hashes are likely to be more unique. What are your thoughts?

@mr-tz
Copy link
Collaborator Author

mr-tz commented Nov 24, 2023

I think it's fairly robust. If we encounter issues we can come back to it.

@mr-tz mr-tz merged commit 143f082 into mandiant:master Nov 24, 2023
19 checks passed
@mr-tz mr-tz deleted the improve-rust-identify branch November 24, 2023 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants