Disable Armadillo v1.71 PEiD rule

HolmesProcessing / Holmes-Totem

Investigation Planner for fast running analysis with predictable execution time. For example, static analysis.

Apache License 2.0

29 stars 18 forks source link

Closed wesinator closed 5 years ago

wesinator commented 5 years ago

PEiD signature is a false positive that detects MSVC compiled binaries.

Only disabled in the rule that is enabled in rules.yar

cynexit commented 5 years ago

Verified as still working. Thanks for the contribution @wesinator !