jblukach / mmi Goto Github PK

Hi @jblukach

Thanks for your tool and your efforts building it! I share some notes after looking at your repo. As I don't use AWS currently, please excuse if my questions are misplaced.

• Why is the LICENSE file green and marked as "known files" in your readme example? Based on what is it flagged as known?
• What is the impact on your tool if atime is disabled due to performance reasons? (The mmi command line tool lists ... based on user access)
• Is there only one Linux default installation available or could it differ between customers/installations?
• What is the purpose of the web requests made? Running your tool makes web requests to your own domain and downloads bloom filters. It would help, if you could describe the mechanisms behind mmi in the readme so others understand what's going and what the web requests are used for. E.g., which domain for which purpose.
• How often are those bloom filters updated? How could I know what is marked as unknown is really unknown or just a version / image issue between installations?
• It would help, if it would be possible to download the files before running the tool on another machine and use them from disk during offline analysis without making web requests. Would that be something to consider?

Thanks for some feedbacks!