search

cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
https://cisagov.github.io/Malcolm/
Other
1.96k stars 328 forks source link

investigate magika as an alternative to libmagic #404

Open mmguero opened 1 week ago

mmguero commented 1 week ago

@mmguero cloned issue idaholab/Malcolm#422 on 2024-02-20:

There are some place in Malcolm where we do file identification (you can grep the code for magic). This project from google, magika might offer some benefit or improvement? As in maybe we use magika as a first step and then fall back to libmagic otherwise? Worth checking out.