ELF

The Executable Linkable Format (ELF) is the executable format for applications on Linux systems.

Artemis is able to parse basic metadata from ELF files.

Other Parsers:

• radare2
• LIEF

References:

• LIEF
• ELF

TOML Collection

There is no way to collect just ELF data with artemis instead it is an optional feature for the Linux filelisting and processes artifacts.

However, it is possible to directly parse ELF files by using JavaScript. See the scripts chapter for examples.

Configuration Options

N/A

Output Structure

An array of ElfInfo entries

export interface ElfInfo {
  /**Array of symbols in ELF binary */
  symbols: string[];
  /**Array of sections in ELF binary */
  sections: string[];
  /**Machine type information in ELF binary */
  machine_type: string;
}