Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -105,9 +105,9 @@ IOCX is **static extraction only**, by design.

## Version Highlights

### v0.7.1 — Adversarial Heuristics Expansion & Parser Hardening
### v0.7.2 — Adversarial Heuristics Expansion & Parser Hardening

v0.7.1 strengthens IOCX’s PE analysis layer with **six new structural heuristics** and introduces a broad adversarial corpus to validate them. This release focuses on robustness, determinism, and resilience against malformed binaries and hostile IOC‑like strings.
v0.7.2 strengthens IOCX’s PE analysis layer with **six new structural heuristics** and introduces a broad adversarial corpus to validate them. This release focuses on robustness, determinism, and resilience against malformed binaries and hostile IOC‑like strings.

- **New PE heuristics added**
- Section overlap detection
Expand All @@ -119,6 +119,7 @@ v0.7.1 strengthens IOCX’s PE analysis layer with **six new structural heuristi
- **Expanded adversarial PE corpus**: malformed imports, corrupted RVAs, invalid optional headers, truncated Rich headers, overlapping sections, franken‑PE hybrids
- **Adversarial fixtures for *all* IOC categories**: crypto, homoglyph domains, malformed URLs, broken IPs, long paths, noisy hashes, invalid base64, deceptive emails
- **Deterministic, JSON‑safe output**: all new samples snapshot‑validated
- **Dependcy fix**: added missing `idna` dependency required for punycode and Unicode domain handling
- **No behavioural changes to extractors**: static‑only design preserved

This release improves IOCX’s **structural awareness**, **error resilience**, and **adversarial coverage**.
Expand Down
3 changes: 2 additions & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[project]
name = "iocx"
version = "0.7.1"
version = "0.7.2"
description = "Static IOC extraction engine for binaries, text, and logs."
authors = [
{ name = "MalX Labs" }
Expand Down Expand Up @@ -32,6 +32,7 @@ classifiers = [
dependencies = [
"pefile>=2024.8.26",
"python-magic>=0.4.27",
"idna>=3.6",
]

[project.scripts]
Expand Down
Loading