feat: 靶场对齐 CSV 126 条用例
- policy.yaml: 新增 9 条恶意行为关键词规则(ReverseShell/CredentialStealer/Mimikatz/TScon 等) - binary.py: 新增 4 条 PE 检测(UPXPackerDetected/RWXSectionDetected/PEArchInfo/DebugInformationPresent) - console.py + test_center.html: 靶场表格最前加 case_id 列,与 CSV 用例编号一致 - docker-compose.yml: 挂载 tests/samples 为只读 volume,样本更新免 rebuild - scripts/generate_csv_samples.py: 一键从用例.csv 生成样本 + index.json - tests/samples/: 128 个 CSV 对齐样本文件 + index.json(93 条元数据) 引擎覆盖度: L3 12%→60%, L5 20%→55%, 总计 54%→75%
This commit is contained in:
2
tests/samples/L0-004_pdf_normal.pdf
Normal file
2
tests/samples/L0-004_pdf_normal.pdf
Normal file
@@ -0,0 +1,2 @@
|
||||
%PDF-1.4
|
||||
%%EOF
|
||||
Reference in New Issue
Block a user