Add README, .gitignore, and refactor common detection constants

This commit is contained in:
Evan Hosinski committed 2025-10-10 16:20:55 -04:00
1 parent e2015b3df2
commit f48178f450
7 files changed
+764 -92

No files matched your search

+1 -1
View File
@@ -104,7 +104,7 @@ func isSuspiciousAutoRun(name, command string) bool {
}
// Check against common Suspicious executable patterns
for _, imageEnd := range common.CommonImageEnds {
for _, imageEnd := range common.CommonImageSuffixes {
imageEndLower := strings.ToLower(imageEnd)
if strings.Contains(commandLower, imageEndLower) {
return true