Variant Analysis

When to Use

• A vulnerability was found and you need to check for similar patterns elsewhere
• A security advisory describes a bug class and you need to assess exposure
• Generalizing a specific bug fix into a broader detection rule
• Systematic sweep after a security incident to find related issues
• Building detection queries from a known vulnerability exemplar

When NOT to Use

• Initial discovery of novel vulnerability classes (use fuzzing or audit)
• Exact-match searching for a known CVE (just grep for the affected function)
• Runtime detection (use WAF or RASP)

Variant Analysis Workflow