hestat / calamity Goto Github PK

Hi,

docker image have volatility profiles not updated, is it possible up to date it?

Thanks

1. Loki IOC folder is not in the right place by default.
   I should have copied it from /opt/calamity/signature-base to /opt/calamity/Loki/signature-base
2. calamity log always says ClamAV has some finding while the actual log of ClamAV is empty
3. idk if it is in your hands, but while loki operating, it has bunch of errors saying the field pe.imphash() doesnt exist in many yara rules

Seems tied to Yara and Yara-rules with OpenSSL. I've tried several things including moving down to Yara-rules and Yara 3.6.2 as some reported this worked prior. I have linked /usr/bin/openssl to the home-brew 1.0.2s however I cannot determine how to get this to work and I'd really like to use Calamity on macOS. Thoughts?