On Fri, Mar 29, 2024 at 12:19:26PM -0700, Andres Freund wrote: Hi Andres, Yes, all correct. For this you'll have to match characteristic sequences of instructions. I've attached a yara rule for this as well. Thanks, Matthias