Add README, .gitignore, and refactor common detection constants
This commit is contained in:
1 parent
e2015b3df2
commit
f48178f450
7 files changed
+764
-92
No files matched your search
@@ -104,7 +104,7 @@ func isSuspiciousAutoRun(name, command string) bool {
|
||||
}
|
||||
|
||||
// Check against common Suspicious executable patterns
|
||||
for _, imageEnd := range common.CommonImageEnds {
|
||||
for _, imageEnd := range common.CommonImageSuffixes {
|
||||
imageEndLower := strings.ToLower(imageEnd)
|
||||
if strings.Contains(commandLower, imageEndLower) {
|
||||
return true
|
||||
|
||||
Reference in new issue
Block a user