Feature #741
Introduce endswith keyword
Effort:
Difficulty:
Description
endswith is a modifier to the existing content keyword. It matches if the content string matches at the end of the buffer being matched. Usage wise it works the same as nocase.
Should we allow depth and within to be used with endswith keyword?
Related issues
History
Updated by Victor Julien about 6 years ago
What about using a negative depth value to indicate it's from the end of the buffer instead of the start?
Updated by Anoop Saldanha about 6 years ago
Actually the same thing can be achieved using isdataat, but this is neater
Updated by Victor Julien about 1 year ago
- Related to Support #2309: SuriCon 2017 brainstorm added
Updated by Victor Julien about 1 year ago
- Status changed from New to Assigned
- Assignee changed from OISF Dev to Victor Julien
- Target version changed from TBD to Soon
Updated by Victor Julien 11 months ago
- Status changed from Assigned to Closed
- Target version changed from Soon to 4.1beta1