konig
konig copied to clipboard
Specify alternate similarity methods
Currently, konig only uses ssdeep over the entirety of the file. If we restrict ourselves to certain filetypes (e.g. PE32), we can make use of the structure of those types and instead perform fuzzy hashing on, say, key sections within the files (.text, .rdata, etc).