Dotnet pe support

[alessandro-Doyensec]

This pull request adds the implementation of the dotnet/pe extractor.

Implementation

The plugin uses https://github.com/saferwall/pe to extract .NET PE file data.

It’s possible to implement this without dependencies using the https://pkg.go.dev/debug/pe package, but it would require around 2000 lines of code to manually parse the .NET-specific CLR header, which contains .DLL information.

For reference, check the following parts of the saferwall/pe code:

• https://github.com/saferwall/pe/blob/ed7fd35b849f1faeddb50e9f792773560acd4042/file.go#L285
• https://github.com/saferwall/pe/blob/ed7fd35b849f1faeddb50e9f792773560acd4042/dotnet.go#L541

Test set

The test was created by writing a simple "HelloWorld" app in .NET with mock dependencies. The expected dependencies were verified using https://github.com/dnSpyEx/dnSpy.

Adding a few more test cases would certainly be beneficial. Do you have any ideas or constraints on which PE files I could include in the test set?

[erikvarga]

Looks like there are some merge conflicts - can you do a sync?

I think it's also possible to give reviewers push permisisons after which they can resolve the merge conflicts too (like I did here).

[alessandro-Doyensec]

Looks like there are some merge conflicts - can you do a sync?

I think it's also possible to give reviewers push permisisons after which they can resolve the merge conflicts too (like I did here).

The branch should be synched now.

I don't know if I'm able to grant you push permission to the PRs. I'll look into it and get back to you once I have more information.