Skip to content

v2.0.0

Choose a tag to compare

View all tags
@tstromberg tstromberg released this 24 Jul 05:16
v2.0.0
96f5bb3

Since our last release (1.4.0):

  • engine swap — all parsing moved to the filefacts crate; breaking JSON schema v3 +
    CLI renames
  • Context-centric output — context as sole evidence surface, grep-style hex, Z85 compact
  • Package + platform coverage — npm/crate/NuGet/APK/ASAR/CRX archives;
    FortiOS/PanOS/JunOS/Ivanti, RouterOS, JCL; Program Identity
  • Signed trait-bundle updates — R2-backed .tar.zst with sha256, pin/check/update, daily check
  • Memory & perf — admission gate, bounded regex cache (fixed ~7.7 GB leak), SIMD matching
  • Correctness — Mach-O offsets, archive XOR/payload recursion, generic JSON, fewer false
    positives

Since rc5:

  • Context-centric output — new context module (+925) and major output rewrite: context is the
    sole evidence surface, grep-style hex windows with bold evidence, overlap-dedup by
    confidence×level
  • New appliance platforms — FortiOS, PanOS, JunOS, Netscaler, Ivanti detection; plus RouterOS
    (.rsc) and JCL (z/OS) rule support
  • Program Identity — publisher/package metadata surfaced; signing info promoted to notable
  • Z85 binary encoding for compact output; improved embedded-binary display, per-trait offsets
  • Binary fixes — corrected Mach-O FAT offsets; tighter tiny-binary context windows
  • Rule eval timeouts extended (90s) for heavily loaded systems
  • Stricter trait-reference validation, perf sweep, dependency updates
Assets 2
Loading