Open Mellvin1994 opened 1 year ago
The "recommended transformers" list is hardcoded for each rule. RuleSuspiciousClinit does not have any recommened transformers, all it does is detecting suspicious code in clinit which just hints that ZKM (Zelix KlassMaster) is being used.
Make sure to ignore the RuleSourceFileAttribute here and not use SourceFileClassNormalizer.
From each list of transformers, choose the first one only (If there are multiple, it's recommended to try the transformer listed first
).
Inspect the output. If its not like you expected, try to change the order of the transformers. Usually for ZKM the StringEncryptionTransformerneeds to be first.
Hi, can you help me with this? no recommended transformers shown for RuleSuspiciousClinit