Matt Nadareski
|
9d7cc4012c
|
Move interfaces to own namespace
|
2022-05-01 17:41:50 -07:00 |
|
Matt Nadareski
|
f9f2e0d932
|
Better naming
|
2022-05-01 17:17:15 -07:00 |
|
Matt Nadareski
|
ffb529edb3
|
Granularly separate out executable types
|
2022-03-14 10:40:44 -07:00 |
|
Matt Nadareski
|
1b1f64c2de
|
Lock unknown checks behind debug flag
This also re-enables some previously commented out checks that could not be verified.
|
2022-03-02 08:56:26 -08:00 |
|
Matt Nadareski
|
dbc841cb7f
|
Clean up formatting of remaining full content checks
|
2021-09-14 11:33:53 -07:00 |
|
Matt Nadareski
|
b779f2f546
|
Only deserialze a file once per round of checks
|
2021-09-10 16:10:15 -07:00 |
|
Matt Nadareski
|
5344de96b2
|
Cleanup and bugfixes; additional notes
|
2021-09-10 15:32:37 -07:00 |
|
Matt Nadareski
|
e0e22d91e1
|
Add notes to CopyKiller
|
2021-08-30 10:00:18 -07:00 |
|
Matt Nadareski
|
6cde7b8bef
|
Reduce redundant code in content matchers now
|
2021-08-25 20:26:43 -07:00 |
|
Matt Nadareski
|
3ab0bcc0ae
|
ContentMatchSets are now expected in IContentCheck
|
2021-08-25 19:37:32 -07:00 |
|
Matt Nadareski
|
43845cf722
|
Rename position flag -> debug flag
|
2021-08-24 15:19:23 -07:00 |
|
Matt Nadareski
|
3667a5b57a
|
Concurrent protection scans per file (#52)
* Move to ConcurrentDictionary
* Convert to ConcurrentQueue
|
2021-07-18 09:44:23 -07:00 |
|
Matt Nadareski
|
3ac57b1c0c
|
Fix static matcher issues (fixes #51)
Note: This may result in slower, but more accurate, scans
|
2021-07-17 23:40:16 -07:00 |
|
Matt Nadareski
|
9f40a8c4c0
|
Perform some post-removal cleanup
|
2021-03-23 16:43:23 -07:00 |
|
Matt Nadareski
|
f9d6fce3bd
|
Reduce boilerplate for directory checks
|
2021-03-23 13:35:12 -07:00 |
|
Matt Nadareski
|
921292e077
|
Static list of content matchers
This also includes some more path matcher conversions that I couldn't reasonably split out
|
2021-03-23 09:52:09 -07:00 |
|
Matt Nadareski
|
b9cc5e9ada
|
Second batch of path check conversions
|
2021-03-22 23:02:01 -07:00 |
|
Matt Nadareski
|
5240f2eb70
|
Simplify util method naming
|
2021-03-22 21:32:58 -07:00 |
|
Matt Nadareski
|
6400c954ef
|
Split matchers more cleanly, comment better
|
2021-03-22 21:25:14 -07:00 |
|
Matt Nadareski
|
7aca58a6c9
|
Better split matching code, fix UPX name
|
2021-03-22 00:41:18 -07:00 |
|
Matt Nadareski
|
15ae2441c3
|
Use content matching helper, part 5
|
2021-03-21 22:37:16 -07:00 |
|
Matt Nadareski
|
cf9bd99f3d
|
Use content matching helper, part 4
|
2021-03-21 22:19:38 -07:00 |
|
Matt Nadareski
|
d01826ffa4
|
Use content matching helper, part 3
|
2021-03-21 15:34:19 -07:00 |
|
Matt Nadareski
|
ab07eb96ce
|
Use content matching helper, part 1
|
2021-03-21 14:30:37 -07:00 |
|
Matt Nadareski
|
544aaed9da
|
Modify array finding, part 2
|
2021-03-20 20:47:56 -07:00 |
|
Matt Nadareski
|
cdc4d509ee
|
Modify array finding, part 1
|
2021-03-20 19:00:22 -07:00 |
|
Matt Nadareski
|
a2888e3371
|
Split IPathCheck method
|
2021-03-19 15:41:49 -07:00 |
|
Matt Nadareski
|
633fe23b80
|
Reflection
This change eliminates the need to explicitly list out every single protection in the same way now that we have interfaces that we can rely on.
|
2021-03-02 15:10:52 -08:00 |
|
Matt Nadareski
|
b3671a430e
|
Swap order of params for IPathCheck
|
2021-02-26 11:02:10 -08:00 |
|
Matt Nadareski
|
7cfa9649e4
|
Add IContentCheck interface
|
2021-02-26 01:26:49 -08:00 |
|
Matt Nadareski
|
c6eaafebbe
|
Add IPathCheck interface
|
2021-02-26 00:32:09 -08:00 |
|
Matt Nadareski
|
0c137e97f0
|
Make protection location optional (default off)
|
2020-09-10 21:43:18 -07:00 |
|
Matt Nadareski
|
c4f8fa4b0d
|
Location, Location, Location (#11)
* Add index to all content checks
* Get mostly onto byte arrays
* Migrate as much as possible to byte array
* Minor cleanup
* Cleanup comments, fix search
* Safer CABs and auto-log on test
* Comments and better SecuROM
* Cleanup, Wise Detection, archives
* Minor fixes
* Add externals, cleanup README
* Add WiseUnpacker
* Add Wise extraction
* Better separation of special file format handling
* Consistent licencing
* Add to README
* Fix StartsWith
* Fix Valve scanning
* Fix build
* Remove old TODO
* Fix BFPK extraction
* More free decompression formats
* Fix EVORE
* Fix LibCrypt detection
* Fix EVORE deletion
|
2020-09-10 21:10:32 -07:00 |
|
Matt Nadareski
|
c78229c3cd
|
Use Any() instead of Count() > 0
|
2020-02-20 14:23:39 -08:00 |
|
Matt Nadareski
|
550086791b
|
Separate protections into their own classes
|
2019-09-27 23:52:24 -07:00 |
|