Correct directory path

Import common.logger

Import common.models

Import module_loader

Import state_helpers

Import StorageS3

Class extends EnrichmentModule

Name ends with _analyzer

StorageS3 in __init__

asyncpg_pool = None

workflows = ["default"]

should_process method

_analyze_file method

process method

create_enrichment_module factory

rules.yar created

YARA meta description

YARA binary signature

YARA condition at offset 0

pyproject.toml created

requires-python >=3.12

hatchling build backend

YARA detection in should_process

Finding category correctness

Severity as integer 0-10

EnrichmentResult created in _analyze_file

create_enrichment_module function

Imports ModuleTestHarness

Imports FileEnrichedFactory

Positive should_process test

Negative should_process test

Uses harness.register_file

Uses harness.create_module

pytest.mark.asyncio decorator

process() extraction test

FileEnrichedFactory.create used

Edge case: no credential entries