sigs: add README with license

This commit is contained in:
William Ballenthin
2021-04-30 08:45:41 -06:00
parent 55b83fc2b5
commit 9a2827935f

9
sigs/README.md Normal file
View File

@@ -0,0 +1,9 @@
# capa/sigs
This directory contains FLIRT signatures that capa uses to identify library functions.
Typically, capa will ignore library functions, which reduces false positives and improves runtime.
These FLIRT signatures were generated by FireEye using the Hex-Rays FLAIR tools such as `pcf` and `sigmake`.
FireEye generated the signatures from source data that they collected; these signatures are not derived from the FLIRT signatures distributed with IDA PRo.
The signatures in this directory have the same license as capa: Apache 2.0.