eclipsotic

Results 4 comments of eclipsotic

Update yara and yara-python to 4.5.0

@maringuu I updated yara and yara-python to 4.5.0. Installation worked fine, but I'm not sure the best way to test that FACT's yara functionality works as expected.

Modify entropy calculation to use mmap instead of read_bytes() to reduce memory usage for large files

> Can you explain why this is an improvement? While in general I agree to you that memory mapping is a good idea (e.g. unblob does it this way) I...

Modify entropy calculation to use mmap instead of read_bytes() to reduce memory usage for large files

> I think it would be even better to change `avg_entropy()` so that it takes e.g. a file pointer and only reads in chunks when calculating the entropy but it's...

Feature request: add ability to reconfigure docker image

I'm going to take a shot at addressing this, we'll see how it goes :crossed_fingers: