Sanctum is a proof-of-concept EDR like tool, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.
Perform some profiling of file scanning, in particular to investigate:
1) Is it faster allocating larger chunks on the heap, or smaller chunks on the stack
2) Will increasing the max capacity of the heap allocation (currently 50 mb) increase performance
3) Is there a faster hashing / less computationally expensive algorithm (MD5 I'm looking at you)
4) Could I run a thread pool over the iterator for file scanning
Perform some profiling of file scanning, in particular to investigate:
1) Is it faster allocating larger chunks on the heap, or smaller chunks on the stack 2) Will increasing the max capacity of the heap allocation (currently 50 mb) increase performance 3) Is there a faster hashing / less computationally expensive algorithm (MD5 I'm looking at you) 4) Could I run a thread pool over the iterator for file scanning