- Improved rules to reduce false positives:
PE171,PE173,PE174,PE178,PE179. - Added new rules to check if the imported DLLs name case matches the actual DLL file names case (
PE183,PE188). - Added new combined rules
PE189andPE190which check if a signed executable imports unsigned libraries. - Added new Electron rules
EXE001andEXE002to check if the used version of Electron is recent and is not preview. - Added support for nicely formatted HTML reports (with custom template support).
- Supported better analysis cancellation.
- Made shared data generators execute on-demand if there is an executable and the rule which need the corresponding data. Previously, all shared generators were executed before analysis unconditionally.
- Many other minor bugfixes and improvements.
Full Changelog: 0.3.1...0.4.0