mirror of
https://github.com/mandiant/capa.git
synced 2025-12-31 15:06:17 -08:00
10 lines
544 B
Markdown
10 lines
544 B
Markdown
# capa/sigs
|
|
|
|
This directory contains FLIRT signatures that capa uses to identify library functions.
|
|
Typically, capa will ignore library functions, which reduces false positives and improves runtime.
|
|
|
|
These FLIRT signatures were generated by Mandiant using the Hex-Rays FLAIR tools such as `pcf` and `sigmake`.
|
|
Mandiant generated the signatures from source data that they collected; these signatures are not derived from the FLIRT signatures distributed with IDA Pro.
|
|
|
|
The signatures in this directory have the same license as capa: Apache 2.0.
|