target / strelka

Real-time, container-based file scanning at enterprise scale
Other
883 stars 116 forks source link

Adding Google Magika Tastes #436

Open phutelmyer opened 9 months ago

phutelmyer commented 9 months ago

Describe the change This change is still in draft, but the idea was to add another form of file tasting: Google Magika

Describe testing procedures Built and tested against files - no known issues with file tasting outside perhaps misattribution (no errors)

The only error comes with import "magic" inside taste.yara and any yara that uses magic. A conflict?

Sample output

{
  "magika": [
    "iso"
  ],
  "mime": [
    "application/octet-stream"
  ],
  "yara": [
    "onenote_file"
  ]
}

Checklist