Skip to content

v1.5

Choose a tag to compare

View all tags
@StevenMcGann StevenMcGann released this 02 May 19:41
· 13 commits to main since this release
v1.5
3816973

Added

  • Triage-level binary inspection for .pyd, .so, and .dll artifacts using pefile and pyelftools.
  • Binary inspection analyzes format validity, PE digital signature presence, import tables, section entropy, unusual section names, and stripped ELF symbols.

Changed

  • Replaced Find-NativeBinaries with Invoke-BinaryInspection.
  • Native binaries now produce specific findings through the BinaryInspection tool instead of generic NativeBinaryCheck presence warnings.
  • Scanner dependencies now include pefile and pyelftools.

Fixed

  • Binary inspection writes JSON to a temp file instead of stdout, preventing stderr warnings from corrupting result parsing.
  • Section entropy no longer reports -0.0 for single-byte sections.

See docs/release-notes/v1.5.md for the full release notes.

Assets 2
Loading