László Vaskó

Huhh, that's something I have not encountered yet. The authentication succeeds but doesn't send the token required to initiate the connection. Maybe an explicit user/tunnelgroup needs to be specified. Could...

It is very hard to come up with a general solution for this. I'd suggest extraction to a separate volume or use quota to mitigate this issue.

It could be considered a more general issue, however what makes the ELF case special, that 99.9% of ELF files won't get extracted via this extractor which is rarely the...

There is still some tests to write. I thought about creating a sample list of events and assert on the contents of the generated json. Do you have better ideas?

Unfortunately LIEF doesn't get built on Python 3.11. It should work, once a new release is published from it, as they have [bumped](https://github.com/lief-project/LIEF/commit/fa306af4775e18b8703e5e264f62667155dd1137) the required `pybind` version and also [added](https://github.com/lief-project/LIEF/commit/d84dd571275c01cff2f320744c6c374399420a91)...

> Can you show us your ideal `--help` output ? :) > > I think the `-e` probably comes from our usage of binwalk in the past, I'd gladly change...

If there is a general consensus that we should rework the switches I am willing to design it :) At this stage it is more of a question to see...

Updated OP with suggested changes in help, also containing a potential future direction to add extensible extract configuration options without cluttering the core UX

It am a bit hesitant about trying to do our hand-crafted functionality using the built-in regex engine, I think we'd need multiple passes or would get a regex with too...

We should measure how much wall time the different extraction steps take, e.g. Yara matching, chunk calculation, carving, extraction and so on.