v1.2-beta
its gonna be a beta version, there's still a lot more stuff i wanna add, i'll still be mentioning the new changes as i add them, and i'll make another post with everything once the final version is out
-
added a new checkbox to filescan, it now detects if a file is actually a dll, so if a .dll gets renamed u'll still know what it really is instead of only filtering .dll files, which wasnt really the best way to do it.
-
added file sizes, so if for some reason my signature detection fails (which i doubt), u can still tell if the file exists just by looking at its size, if its way too big or too small depending on the program, etc.
-
improved the performance a lot, now if the tool is minimized it basically uses nothing, it also parses way faster without using a ton of resources like prefetchview does while parsing. u'll probably see this in my future tools and updates too, bc i wanna make ssing more efficient while also making sure the user's pc doesnt lag. this part is still being worked on tho, i think i can improve it even more.
-
i honestly think this is the best thing i added, basically if u right click a row, or more specifically the file path, u'll see a new option called "show file information". it'll open a journal for that specific file, so there's no need to go into journaltrace anymore. it'll also tell u if the file got renamed or moved to another directory. idk how to really explain it, but once u try it u'll understand what i mean. if u guys think the window is too small or hard to read lmk and i might change it so it looks better.
-
added more yara rules CH1