CIFASIS / CIFASIS/VDiscover

Hook dlopen to improve event detection

Open
#6 0 comments 0 reactions 0 assignees View on GitHub
bug enhancement
Dominant language
Python
Stars
187
Forks
43
PR merge metrics
No merged PRs in 30d

Description

Testcase: /usr/bin/dot /dev/null

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the project entry point that processes the testcase `/usr/bin/dot /dev/null` and trace how event detection currently handles dynamic loading. Identify where `dlopen` events would need to be observed, then verify the change against the supplied testcase and existing event-detection checks.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
reverse-engineering, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.