Releases: dmknght/rkcheck
Releases · dmknght/rkcheck
Changelog version 0.5.0
- Add new logic (beta) to detect function hooking
- Improve rules's syntax using latest version of Yara
- Compile libraries now use static, except ClamAV's library (Debian and other distros didn't enable static build)
- Add CI (based on Debian SID) to check compile errors)
- Add CI to build artifacts everytime a tag is generated (Testing)
- Small improvements in rules and code syntax
rkcheck_v0.4.1
rkcheck_v0.4.0
- Improve Makefile
- Remove all non-related code
- Improve code structure and quality in some module
- Improve and optimize memory scan, including some heuristic info
- Remove or comment some old rules that can make false positives
- --path-clamdb can use a directory of rules
- ClamAV's signatures can use memory scan too (File type is supported)
- Other optimizations, bugs and crashes were fixed