mandiant / mandiant/capa-rules
parse credit card data
Open
false positive
- Dominant language
- No language data
- Stars
- 736
- Forks
- 245
- Avg merge
- 4d 53m
- Merged PRs (30d)
- 2
Description
Tweak or remove the parse credit card data rule/FP part.
When doing _capa /bin/ls_ I get this result, which is shocking ("parse credit card information??")...
...but well, I could be.
Contributor guide
Research direction
Reproduce the report by running capa on /bin/ls and identify the rule that reports credit-card parsing. Review that rule's false-positive behavior, then tune or remove it so /bin/ls no longer produces the misleading result.
Written by the indexing model from the issue text.
Assessment
- Domain
- reverse-engineering, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100