VTDiff
- Why am I getting the error "Need to give exclusion list for filetype %s." ?
- What is the purpose or logic of the “I’M FEELING LUCKY” button
- I'm worried that VTDiff often shows lots of Binary snippets and comparatively fewer Ascii or Domain snippets. Can I change that behaviour?
- Can a snippet have more than one type?
- What exactly are the Binary snippets?
- What exactly are the Domain snippets?
- What exactly are the WideAscii snippets?
- What exactly are the Ascii snippets?
- I often get errors when using VTDiff ; how can I get results?
- VTDiff snippets look very different from those I'd choose by manual inspection, or those that other analysts use in the YARA rules they share. Could you explain why?
- Why does VTDiff return different results even if I give the same input hashes?
- How does VTDiff work? What's the criteria for a snippet to appear in the results page?