unblob icon indicating copy to clipboard operation
unblob copied to clipboard

Add ability to detect simple patterns

Open martonilles opened this issue 3 years ago • 0 comments

This could help manual analysis process and could useful hints to the user.

It would be also interesting to easily add some special pattern detection, especially for unknown chunks to help identifying parts. Some examples;

  • entropy detection with customized chunk size for better accuracy
  • padding detection (all 0x00/0xff)
  • reoccuring pattern detection

We would need some simple way to include simple patterns (like yara rules, magic detection etc.).

In these cases we need just detection, no extraction is required.

martonilles avatar Feb 22 '22 11:02 martonilles