mirror of
https://github.com/mandiant/capa.git
synced 2025-12-12 15:49:46 -08:00
rules: doc
This commit is contained in:
@@ -1048,6 +1048,9 @@ class RuleSet:
|
||||
at this time, a rule evaluator can't do anything special with
|
||||
the "hard rules". it must still do a full top-down match of each
|
||||
rule, in topological order.
|
||||
|
||||
this does not index global features, because these are not selective, and
|
||||
won't be used as the sole feature used to match.
|
||||
"""
|
||||
|
||||
# we'll do a couple phases:
|
||||
|
||||
Reference in New Issue
Block a user