mandiant / mandiant/capa-rules
use word boundaries to reduce FPs when detecting strings using regular expressions
Open
false positive
good first issue
help wanted
- Dominant language
- No language data
- Stars
- 736
- Forks
- 245
- Avg merge
- 4d 53m
- Merged PRs (30d)
- 2
Description
e.g. `/frida(\.exe)?/i` can be updated to `/\bfrida(\.exe)?\b/i` to avoid matching common strings like `friday`.
Contributor guide
Assessment
This issue has not been assessed yet.