EFForg/rayhunter

[Feature Request]: Allow users to re-run analysis on old recordings

Open

#300 opened on Apr 29, 2025

View on GitHub
 (1 comment) (1 reaction) (0 assignees)Rust (431 forks)github user discovery
enhancementhelp wantedui

Repository metrics

Stars
 (5,271 stars)
PR merge metrics
 (PR metrics pending)

Description

What problem does this feature solve or what does it enhance?

Rayhunter analyzes QMDL files as they're recorded, and saves any produced warnings in .ndjson files. However as rayhunter's heuristics improve (or are disabled) over time, these analysis files become out of date.

Proposed Solution

The web UI should show if an analysis file was produced by an older version of rayhunter than what's currently running, and if so, allow the user to reanalyze that file. Because rayhunter runs on memory-constrained hardware, it should probably only analyze one file at a time, but users should be able to queue up more files as they see fit.

Alternatives Considered

No response

Contributor guide

Research direction
Explore the web UI code to understand how old analysis files are displayed and how re analysis can be triggered. Also examine the analysis module to understand the current analysis pipeline and version tracking.
Tech stack
rust
Domain
securitybackend
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Rust
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65