add docstrings for malfind

2026-09-26 19:44:50 +02:00 · 2018-12-19 00:54:51 +00:00
parent a98995aa4e
commit 19d39e53ff
1 changed files with 1 additions and 0 deletions
@@ -137,6 +137,7 @@ class vnode(generic.GenericIntelProcess):
 class vm_map_entry(generic.GenericIntelProcess):

    def is_suspicious(self, context, config_prefix):
+        """Flags memory regions that are mapped rwx or that map an executable not back from a file on disk"""
        ret = False

        perms = self.get_perms()