- Improved rules to reduce false positives:
PE171
,PE173
,PE174
,PE178
,PE179
. - Added new rules to check if the imported DLLs name case matches the actual DLL file names case (
PE183
,PE188
). - Added new combined rules
PE189
andPE190
which check if a signed executable imports unsigned libraries. - Added new Electron rules
EXE001
andEXE002
to check if the used version of Electron is recent and is not preview. - Added support for nicely formatted HTML reports (with custom template support).
- Supported better analysis cancellation.
- Made shared data generators execute on-demand if there is an executable and the rule which need the corresponding data. Previously, all shared generators were executed before analysis unconditionally.
- Many other minor bugfixes and improvements.
Full Changelog: 0.3.1...0.4.0