Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner
https://www.nextron-systems.com/compare-our-scanners/
GNU General Public License v3.0
3.4k stars 583 forks source link

False Positive: foo.txt file #213

Closed ghost closed 2 years ago

ghost commented 2 years ago

Loki shows false positive with foo.txt file (https://github.com/shannonmoeller/find-config/blob/master/test/fixtures/a/foo.txt). The URL doesn't work: https://www.blackhat.com/docs/us-15/materials/us-15-Peterson-GameOver-Zeus-Badgu.

Thank you!

Neo23x0 commented 2 years ago

What's reason why it get's detected. Could you provide the full log line?

Neo23x0 commented 2 years ago

No response

ghost commented 2 years ago

Sorry for the late response. [image: image.png] The URL is https://www.blackhat.com/docs/us-15/materials/us-15-Peterson-GameOver-Zeus-Badgu . Let me know if you need any additional information.

Best regards, Anna G

On Fri, May 20, 2022 at 12:44 PM Florian Roth @.***> wrote:

What's reason why it get's detected. Could you provide the full log line?

— Reply to this email directly, view it on GitHub https://github.com/Neo23x0/Loki/issues/213#issuecomment-1133112363, or unsubscribe https://github.com/notifications/unsubscribe-auth/AUX63MUXEEQ4RDPFR5WXYPLVK66P7ANCNFSM5WPNK6WQ . You are receiving this because you authored the thread.Message ID: @.***>