May 2, 2015
View a80453e

Merge master to features/yara.

Steven Morgan authored on 2015/05/02 07:36:48
March 28, 2015
View 20a3b53

converted cb_file_props from using engine-based ctx to file-based ctx

Kevin Lin authored on 2015/03/28 02:21:49
March 13, 2015
View 56895e2

added CL_TYPE_XML_WORD and CL_TYPE_XML_XL to preclass set

Kevin Lin authored on 2015/03/13 02:46:59
March 11, 2015
View 4823482

added basic framework for msxml processing

Kevin Lin authored on 2015/03/11 04:33:32
March 5, 2015
View 514dfa1

backwards compatibility for target type 13 json scanning

Kevin Lin authored on 2015/03/05 02:08:34
March 4, 2015
View 9de4005

refactor and simplify cli_lsig_eval, add new function cli_exp_eval to loop thru the lsig table and call either lsig_eval or yara_eval.

Steven Morgan authored on 2015/03/04 09:25:13
View 1161698

generates fmap from desc if no map is NULL

Kevin Lin authored on 2015/03/04 07:47:55
View 47c2d61

added BC_PRECLASS hook support; replaces target type 13

Kevin Lin authored on 2015/03/04 05:00:41
January 16, 2015
View f66533d

fixed an incorrect return value for magic_scandesc

Kevin Lin authored on 2015/01/16 08:15:01
December 13, 2014
View f82b5e3

engine bb#12710 - added missing break statements

Kevin Lin authored on 2014/12/13 04:33:41
November 26, 2014
View 93a9a94

ooxml: fixed a number of potential memory issues

Kevin Lin authored on 2014/11/26 03:29:39
View a2e6dce

bb#11208 - added engine limit checks to ooxml parsing

Kevin Lin authored on 2014/11/26 02:06:55
October 17, 2014
View 7360fe6

ole2: added json string sanitization ole2: added parsing errors for issues with codepage encoding

Kevin Lin authored on 2014/10/17 07:38:29
August 1, 2014
View 30a7509

Add proof-of-concept XDP support.

Shawn Webb authored on 2014/08/01 08:11:22
View 99366f4

Pass in a NULL to cli_scanraw when the cache is disabled, thereby causing lazy generation of the MD5 hash of the sample

Shawn Webb authored on 2014/08/01 06:31:29