ImHex icon indicating copy to clipboard operation
ImHex copied to clipboard

[Feature] Decouple Yara Compiling

Open paraknell opened this issue 2 months ago • 4 comments

What feature would you like to see?

Currently yara is compiled from source into the application. This unfortunately makes it harder to use yara(and associated rules) with custom compile instructions.

Example Repo: https://github.com/Neo23x0/signature-base/blob/master/makefile

Would it be possible to specify a path to yara?

If there is a way to do this already, apologies, please advise.

How will this feature be useful to you and others?

  • Wider array of available yara repositories
  • Greater customization for how yara is compiled
  • Different versions of yara could be referenced

Request Type

  • [ ] I can provide a PoC for this feature or am willing to work on it myself and submit a PR

Additional context?

Other Examples: https://github.com/KasperskyLab/klara

paraknell avatar Dec 11 '24 14:12 paraknell