konig icon indicating copy to clipboard operation
konig copied to clipboard

Specify alternate similarity methods

Open krmaxwell opened this issue 12 years ago • 0 comments

Currently, konig only uses ssdeep over the entirety of the file. If we restrict ourselves to certain filetypes (e.g. PE32), we can make use of the structure of those types and instead perform fuzzy hashing on, say, key sections within the files (.text, .rdata, etc).

krmaxwell avatar Jan 27 '13 21:01 krmaxwell