Giulio Muscarello

I managed to change the layout without too much hassle, it was just a matter of changing the permutations. I applied the patch, but I'm not seeing an appreciable performance...

ymm0/1/2 are AVX registers, so you should pass `-mavx` to the compiler. I don't know why this isn't done automatically, though.

It also depends on the existence of a repository "github.com/honeytrap/yara-parser"; I'm currently using https://github.com/CapacitorSet/yara-parser instead.

I'll send them a PR if the maintainer is ok with it.

It was fixed upstream: dgraph-io/badger#572

I'll implement this with transforms, if you don't mind.

Reported in #277 and fixed in #213 which is yet to be merged.

Extracting URLs is rather easy to do, extracting filenames not as much (how can you tell if `639247e0b3b2.d57` is a filename or just a coincidence?). How would you do that?...

Indeed, I noticed that, but I think it's groundwork for future developments. Pinging @nl5887 for feedback.

I'll try that and push a commit later today.