LOLBAS icon indicating copy to clipboard operation
LOLBAS copied to clipboard

Optional aliases introduction to YAML Template

Open fslds opened this issue 3 years ago • 0 comments

Rationale

I wrote some python tooling that processes the LOLBAS project YAML files for query and reporting purposes and I ran in to the issue that procdump(64).exe doesn't actually match any real binaries, but procdump.exe and procdump64.exe do.

My initial reaction was to add an aliases field that list function-identical common binaries, as the rest of the documentation remains correct. Other solutions, such as accepting regex or globs seem overkill.

PS: I'm very grateful for all the work by all contributors of the LOLBAS project. I rely on this project on a regular basis. I also understand the pain of changing data formats and documentation, especially if it is not backwards compatible. My use case for the LOLBAS project might also overstep the project's purpose, so there's that as well. The time spent on this Pull Request is purposely low on my end, so I have no emotional attachment to it, if it is rejected ;-).

fslds avatar Aug 08 '22 20:08 fslds