Skip to content
This repository was archived by the owner on Apr 24, 2020. It is now read-only.
This repository was archived by the owner on Apr 24, 2020. It is now read-only.

Specify alternate similarity methods #8

@krmaxwell

Description

@krmaxwell

Currently, konig only uses ssdeep over the entirety of the file. If we restrict ourselves to certain filetypes (e.g. PE32), we can make use of the structure of those types and instead perform fuzzy hashing on, say, key sections within the files (.text, .rdata, etc).

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions