inliniac/suricata — pull request #104 by dabarb1 (2012-09-27 17:22:02+00:00)
Title: First version of Portable Executable header anomaly scanner

Next attempt at pull request for portable executable (PE) file scanner for header anomalies. Contains both a file detector w/keyword 'pescan' and logger which writes PE header info to a log file.