yextend

yextend copied to clipboard

I noticed that yextend can only be run from its own directory because it has to match the current working directory. The following two modes of operation did not work...

stoerchl

api for python scripts

2

is there API for python scripts?

InYourFuture

Will the package work with yara-python 4.0.1?

dangoldstein

./run_yextend -r /home/myfiles/yara/rules/email_index.yar -t /home/file/20200522141244/redis2.4.5.zip -j JSON parse error : [json.exception.parse_error.101] parse error at 25: syntax error - invalid string: ill-formed UTF-8 byte; last read: '"yara½' JSON parse error :...

striveman1379

I got the following errors when make unittests ----------------------------------- make unittests nosetests -s ....E............................E...E...........E....... ====================================================================== ERROR: test_files_yextend.Test_Yextend_files.test_content_yara_7z_multiple_embed_pdf ---------------------------------------------------------------------- Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/nose/case.py", line 197, in runTest self.test(*self.arg)...

striveman1379

I've been using yextend to identify strings in .docx files that are indicative of the presence of a sub document. While testing, I realized what appears to be a bug...

CoSeiso

Portable Installation - pip package or similar

2

Yextend is designed to be compiled from source and invokes a couple of subprocesses (`pdfdetach`, `pdftotext`, `yara`). This makes it challenging to build and run in an isolated environment (e.g....

austinbyers

Feature request: in-memory analysis

1

It would be great to be able to scan sensitive files entirely in-memory so that they never have to be saved to disk. This would likely be a feature added...

austinbyers

YARA rules can include [external variables](https://yara.readthedocs.io/en/v3.7.0/writingrules.html#external-variables), which `yara` allows you to define with a `-d` flag. It would be great if `yextend` could support external variables (perhaps with the same...

austinbyers

Update codebase to yara 4.4.x

3

The current stable version of yara is 4.4.0, but the current codebase can not compiled with that version. This makes it impossible to create a package, because the dependency is...

f0086