offsetscan 0.2.2

Standalone native corpus-scale engine for PE parsing, entropy, string extraction, and IOC panels — schema-compatible with OffsetInspect.Result/ThreatScanResult JSON output.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94

# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
#
# When uploading crates to the registry Cargo will automatically
# "normalize" Cargo.toml files for maximal compatibility
# with all versions of Cargo and also rewrite `path` dependencies
# to registry (e.g., crates.io) dependencies.
#
# If you are reading this file be aware that the original Cargo.toml
# will likely look very different (and much more reasonable).
# See Cargo.toml.orig for the original contents.

[package]
edition = "2021"
name = "offsetscan"
version = "0.2.2"
authors = ["DreadHost Research"]
build = false
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "Standalone native corpus-scale engine for PE parsing, entropy, string extraction, and IOC panels — schema-compatible with OffsetInspect.Result/ThreatScanResult JSON output."
readme = "README.md"
keywords = [
    "malware",
    "forensics",
    "pe",
    "entropy",
    "security",
]
categories = [
    "command-line-utilities",
    "parser-implementations",
]
license = "MIT"
repository = "https://github.com/warpedatom/OffsetScan"

[features]
default = []
yara-scan = ["dep:yara"]

[[bin]]
name = "offsetscan"
path = "src/main.rs"

[dependencies.chrono]
version = "0.4"
features = ["serde"]

[dependencies.clap]
version = "4"
features = ["derive"]

[dependencies.csv]
version = "1"

[dependencies.glob]
version = "0.3"

[dependencies.goblin]
version = "0.8"

[dependencies.md-5]
version = "0.10"

[dependencies.rayon]
version = "1"

[dependencies.serde]
version = "1"
features = ["derive"]

[dependencies.serde_json]
version = "1"

[dependencies.sha1]
version = "0.10"

[dependencies.sha2]
version = "0.10"

[dependencies.walkdir]
version = "2"

[dependencies.yara]
version = "0.32"
features = ["vendored"]
optional = true

[profile.release]
lto = true
codegen-units = 1
panic = "abort"