-
Notifications
You must be signed in to change notification settings - Fork 4
Performance Metrics
The cbc-binary-analysis
tool packaged with the CBC Binary Toolkit was tested on multiple operating systems with the following results coming from a macOS 10.15 Catalina laptop. The tested utilized 10000 binaries that only differed by a sequence of randomly generated bytes appended to the end of the executable code.
Binary size: 918kb
Number of hashes:: 10000
Time: 2:49:48.382821
Rate: 1.0188 binary/sec
DB size on completetion: 4 Mb
The following factors will affect the rate at which the cbc-binary-analysis
tool can process binaries.
- Binary size
- Network speed
- Analysis engine processing time
- ie. Yara rule complexity and quantity
You may need to adjust your configured expiration_seconds based on how many hashes you submit and the rate at which they can be processed otherwise the AWS S3 download url may expire before the binary is processed. Documentation on modifying your expiration_seconds can be found here.
Copyright © 2020 VMware Inc., All Rights Reserved.
Information here is current as of Carbon Black Cloud Binary Toolkit 1.0.0