yara icon indicating copy to clipboard operation
yara copied to clipboard

feat: selectively zero match lists

Open secDre4mer opened this issue 8 months ago • 0 comments

Instead of completely zeroing match lists at the end of each scan (which is O(num_strings) and thus scales badly with large rule sets), keep track of which list entries have been used. Only those entries need to be zeroed at the end. This essentially changes the O(num_strings) to O(num_matched_strings), which is usually far lesser.

secDre4mer avatar Jun 13 '24 09:06 secDre4mer