mirror of
https://github.com/mandiant/capa.git
synced 2026-02-04 19:12:01 -08:00
vmray: improve models.py comments
This commit is contained in:
@@ -106,7 +106,7 @@ class Params(BaseModel):
|
||||
|
||||
def validate_call_name(value: str) -> str:
|
||||
if value.startswith("sys_"):
|
||||
# VMRay appears to log kernel function calls ("sys_*") so we remove that
|
||||
# VMRay appears to log kernel function calls ("sys_*") for Linux so we remove that
|
||||
# here to enable capa matching
|
||||
return value[4:]
|
||||
else:
|
||||
|
||||
Reference in New Issue
Block a user