Matt Nadareski
9d7cc4012c
Move interfaces to own namespace
2022-05-01 17:41:50 -07:00
Matt Nadareski
a44bdf9013
Reorder inherited interfaces
2022-05-01 17:23:00 -07:00
Matt Nadareski
f9f2e0d932
Better naming
2022-05-01 17:17:15 -07:00
Matt Nadareski
65eea4301d
Hide section complexity from content checks
2022-03-14 23:01:06 -07:00
Matt Nadareski
ceae505f4d
Switch order of interface parameters
2022-03-14 22:51:17 -07:00
Matt Nadareski
a7e9164f4f
Use SourceArray for PE checks
2022-03-14 22:49:35 -07:00
Matt Nadareski
513e799aa3
Migrate protections to new interfaces
2022-03-14 11:20:11 -07:00
Matt Nadareski
ffb529edb3
Granularly separate out executable types
2022-03-14 10:40:44 -07:00
Matt Nadareski
76465d30ec
Change fileContent to sectionContent in SmartE
2022-03-08 22:30:12 -08:00
Matt Nadareski
d6fd0c4d2c
Reduce reliance on fileContent; add notes
2021-09-11 22:27:52 -07:00
Matt Nadareski
2c2aee6797
Add a couple of sections to raw read with notes
2021-09-11 21:10:29 -07:00
Matt Nadareski
afdd032f73
Start using more methods to make life easier
2021-09-11 21:03:36 -07:00
Matt Nadareski
214e8d41c7
Pre-read 3 most commonly-used section data
...
This also adds comprehensive notes around the sections used in various protections, how they're used, and what we can do with them. It also adds a couple of various notes based on the findings from the protection audit
2021-09-11 16:47:25 -07:00
Matt Nadareski
b779f2f546
Only deserialze a file once per round of checks
2021-09-10 16:10:15 -07:00
Matt Nadareski
5344de96b2
Cleanup and bugfixes; additional notes
2021-09-10 15:32:37 -07:00
Matt Nadareski
53088b4e60
Convert SmartE to section based
2021-09-03 13:26:52 -07:00
Matt Nadareski
6cde7b8bef
Reduce redundant code in content matchers now
2021-08-25 20:26:43 -07:00
Matt Nadareski
3ab0bcc0ae
ContentMatchSets are now expected in IContentCheck
2021-08-25 19:37:32 -07:00
Matt Nadareski
43845cf722
Rename position flag -> debug flag
2021-08-24 15:19:23 -07:00
Matt Nadareski
3667a5b57a
Concurrent protection scans per file ( #52 )
...
* Move to ConcurrentDictionary
* Convert to ConcurrentQueue
2021-07-18 09:44:23 -07:00
Matt Nadareski
3ac57b1c0c
Fix static matcher issues ( fixes #51 )
...
Note: This may result in slower, but more accurate, scans
2021-07-17 23:40:16 -07:00
Matt Nadareski
b2e8b66eae
Fix SmartE overmatching
2021-04-01 11:20:13 -07:00
Matt Nadareski
9f40a8c4c0
Perform some post-removal cleanup
2021-03-23 16:43:23 -07:00
Matt Nadareski
f9d6fce3bd
Reduce boilerplate for directory checks
2021-03-23 13:35:12 -07:00
Matt Nadareski
aa83896963
Final batch of first pass for path check conversions
2021-03-23 10:36:14 -07:00
Matt Nadareski
921292e077
Static list of content matchers
...
This also includes some more path matcher conversions that I couldn't reasonably split out
2021-03-23 09:52:09 -07:00
Matt Nadareski
5240f2eb70
Simplify util method naming
2021-03-22 21:32:58 -07:00
Matt Nadareski
6400c954ef
Split matchers more cleanly, comment better
2021-03-22 21:25:14 -07:00
Matt Nadareski
7aca58a6c9
Better split matching code, fix UPX name
2021-03-22 00:41:18 -07:00
Matt Nadareski
15ae2441c3
Use content matching helper, part 5
2021-03-21 22:37:16 -07:00
Matt Nadareski
d01826ffa4
Use content matching helper, part 3
2021-03-21 15:34:19 -07:00
Matt Nadareski
ab07eb96ce
Use content matching helper, part 1
2021-03-21 14:30:37 -07:00
Matt Nadareski
544aaed9da
Modify array finding, part 2
2021-03-20 20:47:56 -07:00
Matt Nadareski
cdc4d509ee
Modify array finding, part 1
2021-03-20 19:00:22 -07:00
Matt Nadareski
a2888e3371
Split IPathCheck method
2021-03-19 15:41:49 -07:00
Matt Nadareski
b3671a430e
Swap order of params for IPathCheck
2021-02-26 11:02:10 -08:00
Matt Nadareski
7cfa9649e4
Add IContentCheck interface
2021-02-26 01:26:49 -08:00
Matt Nadareski
c6eaafebbe
Add IPathCheck interface
2021-02-26 00:32:09 -08:00
Matt Nadareski
513a64df4c
Rename Cucko and cleanup misc
2020-10-28 10:42:54 -07:00
Matt Nadareski
0c137e97f0
Make protection location optional (default off)
2020-09-10 21:43:18 -07:00
Matt Nadareski
c4f8fa4b0d
Location, Location, Location ( #11 )
...
* Add index to all content checks
* Get mostly onto byte arrays
* Migrate as much as possible to byte array
* Minor cleanup
* Cleanup comments, fix search
* Safer CABs and auto-log on test
* Comments and better SecuROM
* Cleanup, Wise Detection, archives
* Minor fixes
* Add externals, cleanup README
* Add WiseUnpacker
* Add Wise extraction
* Better separation of special file format handling
* Consistent licencing
* Add to README
* Fix StartsWith
* Fix Valve scanning
* Fix build
* Remove old TODO
* Fix BFPK extraction
* More free decompression formats
* Fix EVORE
* Fix LibCrypt detection
* Fix EVORE deletion
2020-09-10 21:10:32 -07:00
Matt Nadareski
c78229c3cd
Use Any() instead of Count() > 0
2020-02-20 14:23:39 -08:00
Matt Nadareski
550086791b
Separate protections into their own classes
2019-09-27 23:52:24 -07:00
