binarly-io / fwhunt-scan

Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules
GNU General Public License v3.0
212 stars 30 forks source link

Multi rule scanner #33

Closed xorpse closed 2 years ago

xorpse commented 2 years ago

Adds a class UefiMultiScanner, which can match multiple rules simultaneously. It attempts to avoid duplicating work by finding common properties amongst rules and checking for them only once.

A UefiMultiScanner takes a list of rules and produces a set of indices in its results field corresponding to matched rules from the input list.