simsong / bulk_extractor

This is the development tree. Production downloads are at:
https://github.com/simsong/bulk_extractor/releases
Other
1.08k stars 185 forks source link

Add a field to scanner_info so that we can specify minimum number of distinct bytes necessary in an sbuf to run a scanner #296

Open simsong opened 2 years ago

simsong commented 2 years ago

We don't need to run scan_acct unless there are 4 distinct bytes in the sbuf. We don't need to run scan_aes unless there are .. how many bytes in the sbuf? We need to find out how many distinct bytes a scheduled key typically has