chainguard-dev / chainguard-dev/malcontent
Feature Request: Behavior Category Filtering for Diff Command
Open
Nobody has claimed this yet.
- Dominant language
- YARA
- Stars
- 675
- Forks
- 63
- Avg merge
- 23h 9m
- Merged PRs (30d)
- 24
Description
- Add
--include-categoriesand--exclude-categoriesflags - Filter behaviors based on the (objective) part of behavior IDs
for eg :
mal diff --exclude-categories=data,evasion oldfile newfile
mal diff --include-categories=c2 oldfile newfile
cc @egibs thoughts/suggestions on it.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the mal diff command entry point and trace how behavior IDs are compared between the two files. Add the two category flags so included or excluded objective ID categories control the diff output, then verify both examples and the existing diff behavior.
Written by the indexing model from the issue text.
Assessment
- Domain
- cli
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100