vee1e/capa
1
0
Fork 0
mirror of https://github.com/vee1e/capa.git synced 2026-09-01 18:57:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
capa/sigs
History
Moritz Raabe 8de69c639a s/fireeye/mandiant
2021-09-29 12:55:16 +02:00
..
1_flare_msvc_rtf_32_64.sig main: load signatures in order of their basename 2021-06-29 10:52:07 -06:00
2_flare_msvc_atlmfc_32_64.sig main: load signatures in order of their basename 2021-06-29 10:52:07 -06:00
3_flare_common_libs.sig main: load signatures in order of their basename 2021-06-29 10:52:07 -06:00
README.md s/fireeye/mandiant 2021-09-29 12:55:16 +02:00

README.md

capa/sigs

This directory contains FLIRT signatures that capa uses to identify library functions. Typically, capa will ignore library functions, which reduces false positives and improves runtime.

These FLIRT signatures were generated by Mandiant using the Hex-Rays FLAIR tools such as pcf and sigmake. Mandiant generated the signatures from source data that they collected; these signatures are not derived from the FLIRT signatures distributed with IDA Pro.

The signatures in this directory have the same license as capa: Apache 2.0.