yara-x icon indicating copy to clipboard operation
yara-x copied to clipboard

Pre-processing modules system

Open nikolay-n opened this issue 2 years ago • 2 comments

It will be great to have the additional pre-processing modules subsystem that can transform original data, e.g extracting, unpacking, decrypting or other kinds of tasks before the scan, without need to use custom yara modules functions and full potential of yara search engine.

Example modules can be:

  • detect/unpack and upx, pyinstaller, asar, dmg, msi, zip ...

I'm sure with the right SDK for such functionality community will produce a lot of useful stuff.

nikolay-n avatar Jan 10 '24 16:01 nikolay-n

Sure, that feature is my long-term plan for YARA-X.

plusvic avatar Jan 12 '24 16:01 plusvic