Heuristic Scoring
How accdu_inspector calculates suspicion scores.
Scores range from 0–100. High scores suggest suspicious or executable content.
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
How accdu_inspector calculates suspicion scores.
| Component | Weight |
|---|---|
| Keyword presence | 0–40 |
| URLs / IPs / file paths | +10–20 |
| OLE / PE signatures | +15–25 |
| Embedded blobs | +15 |
| VBA markers | +15 |
