Marton Illes
Marton Illes
we have a root File and in case of processing a directory, then we have a list of root Files FilesystemObject - parent (Chunk, null for root) - children (list...
Similar to #263
That's a good point I see two alternatives: - we split the ELF handler into a generic ELF handler and a Linux kernel specific one, where the extractor would work...
This probably a duplicate of #16
Maybe we should also add a --version argument
@extrowerk Can you point me to some sample images? Also Pull Requests are welcome :)
We want to have different outputs: - reporting (summary of extraction, valid, invalid chunks etc.) - logs - metadata (extracted file info, information on the content)
vectorscan does not have a python API which could complicate things. Other somewhat slower solution is to use simple regex on mmaped file, which should be functionally identical and use...
API reference should go in v2
@romainthomas Thanks for the response. Just wondering what is the downside of using `COUNT_HASH` what could go wrong? (I am thinking about setting it to low, and hiding some or...