Example: multi-decode

Inputs
Profile
Report outputs
- Triage report (converted from triage_report.json)
- CSV outputs

Inputs

examples/inputs/multi-decode-samples/encoded_content.txt

Profile

# Multi-Layer Content Decoding Example Profile
# Demonstrates decoding nested/layered encoded content

# Enable all decoders for multi-layer detection
decode = ["base64", "hex", "percent-encoding", "html-entity", "unicode-escape-sequences"]

max-file-size = 10485760  # 10 MiB

tag = "multi-decode"

# Patterns to find in decoded content
[[patterns]]
  name = "Decoded Password"
  pattern = "password"
  type = "string"
  case-insensitive = true

[[patterns]]
  name = "Decoded Secret"
  pattern = "secret"
  type = "string"
  case-insensitive = true

[[patterns]]
  name = "Decoded Shell Command"
  pattern = "/bin/(bash|sh|zsh)"
  type = "regex"

[[patterns]]
  name = "Decoded PowerShell"
  pattern = "powershell"
  type = "string"
  case-insensitive = true

[[patterns]]
  name = "Decoded URL"
  pattern = "https?://[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}"
  type = "regex"

[[patterns]]
  name = "Decoded IP Address"
  pattern = "\\b(?:\\d{1,3}\\.){3}\\d{1,3}\\b"
  type = "regex"

[[patterns]]
  name = "Decoded Eval"
  pattern = "eval\\s*\\("
  type = "regex"

[[patterns]]
  name = "Decoded Exec"
  pattern = "exec\\s*\\("
  type = "regex"

Report outputs

Triage report (converted from triage_report.json)

total_files	13
critical_count	0
high_count	0
medium_count	0
low_count	0
minimal_count	13
must_investigate_count	0
all_scores	None
generated_at	2025-12-03T09:19:44.021571999+00:00

top_scores

file_type	must_investigate	path	pattern_count_score	pattern_matches	pattern_severity_score	reasons	risk_level	score	sha256
Other	False	/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.html-entities/encoded_content.txt.percent-encoding.html-entities.unicode-escape-sequences	15	13	12	["13 suspicious patterns detected"]	Minimal	27	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33
Other	False	/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.html-entities	15	12	12	["12 suspicious patterns detected"]	Minimal	27	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb
Other	False	/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.unicode-escape-sequences/encoded_content.txt.percent-encoding.unicode-escape-sequences.html-entities	15	13	12	["13 suspicious patterns detected"]	Minimal	27	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33
Other	False	/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.unicode-escape-sequences	15	13	12	["13 suspicious patterns detected"]	Minimal	27	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4
Other	False	/encoded_content.txt/encoded_content.txt.percent-encoding	15	12	12	["12 suspicious patterns detected"]	Minimal	27	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531
Other	False	/encoded_content.txt/encoded_content.txt.html-entities/encoded_content.txt.html-entities.percent-encoding	15	12	12	["12 suspicious patterns detected"]	Minimal	27	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb
Other	False	/encoded_content.txt/encoded_content.txt.html-entities/encoded_content.txt.html-entities.unicode-escape-sequences/encoded_content.txt.html-entities.unicode-escape-sequences.percent-encoding	15	13	12	["13 suspicious patterns detected"]	Minimal	27	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33
Other	False	/encoded_content.txt/encoded_content.txt.html-entities/encoded_content.txt.html-entities.unicode-escape-sequences	15	13	12	["13 suspicious patterns detected"]	Minimal	27	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5
Other	False	/encoded_content.txt/encoded_content.txt.html-entities	15	12	12	["12 suspicious patterns detected"]	Minimal	27	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27
Other	False	/encoded_content.txt/encoded_content.txt.unicode-escape-sequences/encoded_content.txt.unicode-escape-sequences.percent-encoding	15	13	12	["13 suspicious patterns detected"]	Minimal	27	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4
Other	False	/encoded_content.txt/encoded_content.txt.unicode-escape-sequences/encoded_content.txt.unicode-escape-sequences.html-entities	15	13	12	["13 suspicious patterns detected"]	Minimal	27	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5
Other	False	/encoded_content.txt/encoded_content.txt.unicode-escape-sequences	15	13	12	["13 suspicious patterns detected"]	Minimal	27	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2
Other	False	/encoded_content.txt	15	12	12	["12 suspicious patterns detected"]	Minimal	27	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab

CSV outputs

errors.csv

Empty CSV

files.csv

path	file_name	sha256	file_created	file_modified	file_accessed	mime_types_from_file_extension	is_decoded_file
/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.html-entities/encoded_content.txt.percent-encoding.html-entities.unicode-escape-sequences	encoded_content.txt.percent-encoding.html-entities.unicode-escape-sequences	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33				[]	1
/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.html-entities	encoded_content.txt.percent-encoding.html-entities	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb				[]	1
/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.unicode-escape-sequences/encoded_content.txt.percent-encoding.unicode-escape-sequences.html-entities	encoded_content.txt.percent-encoding.unicode-escape-sequences.html-entities	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33				[]	1
/encoded_content.txt/encoded_content.txt.percent-encoding/encoded_content.txt.percent-encoding.unicode-escape-sequences	encoded_content.txt.percent-encoding.unicode-escape-sequences	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4				[]	1
/encoded_content.txt/encoded_content.txt.percent-encoding	encoded_content.txt.percent-encoding	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531				[]	1
/encoded_content.txt/encoded_content.txt.html-entities/encoded_content.txt.html-entities.percent-encoding	encoded_content.txt.html-entities.percent-encoding	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb				[]	1
/encoded_content.txt/encoded_content.txt.html-entities/encoded_content.txt.html-entities.unicode-escape-sequences/encoded_content.txt.html-entities.unicode-escape-sequences.percent-encoding	encoded_content.txt.html-entities.unicode-escape-sequences.percent-encoding	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33				[]	1
/encoded_content.txt/encoded_content.txt.html-entities/encoded_content.txt.html-entities.unicode-escape-sequences	encoded_content.txt.html-entities.unicode-escape-sequences	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5				[]	1
/encoded_content.txt/encoded_content.txt.html-entities	encoded_content.txt.html-entities	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27				[]	1
/encoded_content.txt/encoded_content.txt.unicode-escape-sequences/encoded_content.txt.unicode-escape-sequences.percent-encoding	encoded_content.txt.unicode-escape-sequences.percent-encoding	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4				[]	1
/encoded_content.txt/encoded_content.txt.unicode-escape-sequences/encoded_content.txt.unicode-escape-sequences.html-entities	encoded_content.txt.unicode-escape-sequences.html-entities	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5				[]	1
/encoded_content.txt/encoded_content.txt.unicode-escape-sequences	encoded_content.txt.unicode-escape-sequences	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2				[]	1
/encoded_content.txt	encoded_content.txt	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	2025-12-03T08:56:20.496889204Z	2025-12-03T08:56:20.496889204Z	2025-12-03T08:56:20.496889204Z	["text/plain"]	0

pattern_matches.csv

id	sha256	pattern_name	match_type	match	location	length
1	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Shell Command	regex	/bin/bash	7:25	9
2	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded URL	regex	https://malicious.example.com	24:22	29
3	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded IP Address	regex	192.168.1.100	27:21	13
4	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Eval	regex	eval(	30:33	5
5	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Exec	regex	exec(	33:33	5
6	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Password	string	password	4:19	8
7	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Secret	string	secret	4:28	6
8	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Secret	string	secret	12:16	6
9	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Secret	string	secret	13:5	6
10	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Password	string	password	15:16	8
11	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded Password	string	password	16:16	8
12	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded PowerShell	string	powershell	21:19	10
13	352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	Decoded PowerShell	string	powershell	22:20	10
14	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Shell Command	regex	/bin/bash	7:25	9
15	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded URL	regex	https://malicious.example.com	24:22	29
16	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded IP Address	regex	192.168.1.100	27:21	13
17	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Eval	regex	eval(	30:33	5
18	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Exec	regex	exec(	33:33	5
19	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Password	string	password	4:19	8
20	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Secret	string	secret	4:28	6
21	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Secret	string	secret	12:16	6
22	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Secret	string	secret	13:5	6
23	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Password	string	password	15:16	8
24	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded Password	string	password	16:16	8
25	df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	Decoded PowerShell	string	powershell	21:19	10
26	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Shell Command	regex	/bin/bash	7:25	9
27	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded URL	regex	https://malicious.example.com	24:22	29
28	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded IP Address	regex	192.168.1.100	27:21	13
29	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Eval	regex	eval(	30:33	5
30	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Exec	regex	exec(	33:33	5
31	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Password	string	password	4:19	8
32	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Secret	string	secret	4:28	6
33	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Secret	string	secret	12:16	6
34	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Secret	string	secret	13:5	6
35	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Password	string	password	15:16	8
36	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded Password	string	password	16:16	8
37	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded PowerShell	string	powershell	21:19	10
38	312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	Decoded PowerShell	string	powershell	22:20	10
39	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Shell Command	regex	/bin/bash	7:25	9
40	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded URL	regex	https://malicious.example.com	24:22	29
41	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded IP Address	regex	192.168.1.100	27:21	13
42	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Eval	regex	eval(	30:33	5
43	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Exec	regex	exec(	33:33	5
44	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Password	string	password	4:19	8
45	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Secret	string	secret	4:28	6
46	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Secret	string	secret	12:16	6
47	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Secret	string	secret	13:5	6
48	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Password	string	password	15:16	8
49	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded Password	string	password	16:16	8
50	a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	Decoded PowerShell	string	powershell	21:19	10
51	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Shell Command	regex	/bin/bash	7:25	9
52	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded URL	regex	https://malicious.example.com	24:22	29
53	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded IP Address	regex	192.168.1.100	27:21	13
54	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Eval	regex	eval(	30:33	5
55	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Exec	regex	exec(	33:33	5
56	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Password	string	password	4:19	8
57	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Secret	string	secret	4:28	6
58	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Secret	string	secret	12:16	6
59	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Secret	string	secret	13:5	6
60	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Password	string	password	15:16	8
61	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded Password	string	password	16:16	8
62	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded PowerShell	string	powershell	21:19	10
63	444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	Decoded PowerShell	string	powershell	22:20	10
64	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Shell Command	regex	/bin/bash	7:25	9
65	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded URL	regex	https://malicious.example.com	24:22	29
66	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded IP Address	regex	192.168.1.100	27:21	13
67	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Eval	regex	eval(	30:33	5
68	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Exec	regex	exec(	33:33	5
69	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Password	string	password	4:19	8
70	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Secret	string	secret	4:28	6
71	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Secret	string	secret	12:16	6
72	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Secret	string	secret	13:5	6
73	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Password	string	password	15:16	8
74	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded Password	string	password	16:16	8
75	20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	Decoded PowerShell	string	powershell	21:19	10
76	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Shell Command	regex	/bin/bash	7:25	9
77	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded URL	regex	https://malicious.example.com	24:22	29
78	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded IP Address	regex	192.168.1.100	27:21	13
79	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Eval	regex	eval(	30:33	5
80	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Exec	regex	exec(	33:33	5
81	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Password	string	password	4:19	8
82	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Secret	string	secret	4:28	6
83	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Secret	string	secret	12:16	6
84	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Secret	string	secret	13:5	6
85	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Password	string	password	15:16	8
86	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded Password	string	password	16:16	8
87	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded PowerShell	string	powershell	21:19	10
88	fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	Decoded PowerShell	string	powershell	22:20	10
89	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Shell Command	regex	/bin/bash	7:25	9
90	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded URL	regex	https://malicious.example.com	24:22	29
91	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded IP Address	regex	192.168.1.100	27:21	13
92	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Eval	regex	eval(	30:33	5
93	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Exec	regex	exec(	33:33	5
94	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Password	string	password	4:19	8
95	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Secret	string	secret	4:28	6
96	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Secret	string	secret	12:16	6
97	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Secret	string	secret	13:5	6
98	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Password	string	password	15:16	8
99	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded Password	string	password	16:16	8
100	7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	Decoded PowerShell	string	powershell	21:19	10

signature_matches.csv

Empty CSV

unique_files.csv

sha256	sha1	md5	file_size	mime_type_for_content	shannon_entropy
352f2322f3161013de22b3b889f630f4af4e935fd68b41221b0eb6a4cad31c33	2226e6129030d822556d5001316acbf230d461f8	47634d0bae9e8453be3c852ba4a55a63	1068	text/plain	5.44068027690163
df654a907a0f491a0b72935ea60a65a183ef5aced6c7b6c27701f7f100e6dbfb	d52f99fe3a25351c228379238a8005b4c785ad5b	58d36a6a736deaa12758ed564aa96e2a	1118	text/plain	5.51624171557143
312be978a480d5a639fa3ed3ca830a062eaf6ad654407799bade789580488fe4	e8d2ec418967343f5873ce465c77713313ecae07	c127057ad061e05d3c746dc38f9f1e21	1080	text/plain	5.4628686004121
a940cf0d8b9694f5775dcd5e267590b9b700902207f76e81913f9999991f0531	f1dabd3ae4cd4cfb96bd80423fa159383063b5c5	2a86fc8c6b9309ee6582f456e08ce8e6	1130	text/plain	5.53751334260593
444a9458395e7bfd9cbfa05dff249089bf1c438bef713dc0797c778d477245c5	b20cec3e4e38c03134d430bdeca57979ba5f01a0	3966c48c1071ebe3bdb73edb5bd6e733	1070	text/plain	5.449852146702
20e66bf70953650ec5ef7db6afedd4f79500eabc1c6db5bca5c31661185dba27	bf78a462a04914672e9b9e988a5cc510fbb2ac7e	ec31d306ca5191e3c2c76db3f080b5dd	1120	text/plain	5.52482552337943
fb83ac54cccb2c353ee4a53f007dac403f02d9b4f3cbacfdeae93997d5d8f3c2	bb18389495edfadc4c1e1817fc6a6fd0853b4fbc	9d9c7f3a9f13cee59714f92477919aab	1082	text/plain	5.47192750372883
7060620c9e47a84c306a4599fcd4f0ccda7c811ce7a22418191716f72a0805ab	8148872d4e893943280d41bcee15554dd1e339e1	10b1a9d811d97ee6624322b98894173c	1132	text/plain	5.54599576246902

Keyboard shortcuts

sus - Systematic Universal Scanner - Documentation