today I read up on how to detect the OS that an ELF file targets. I assumed it was set somewhere in the header, but its not quite that easy.

research notes: https://github.com/fireeye/capa/issues/724 standalone script: https://github.com/fireeye/capa/blob/baaa8ba2c10b2dd27554223e5469ce712c5c1902/scripts/detect-elf-os.py