dissect.target
dissect.target copied to clipboard
Specific order of args specified to Yara hits on itself.
When running the following command, if an argument is placed between --rules and the target path, yara will run the rule file against itself instead of file.txt in the example below.
target-query -f yara --rules <rule_path> --direct file.txt
however, when adding the equal sign to rules, it works correctly:
target-query -f yara --rules=<rule_path> --direct file.txt
Hi @nmhawry, thank you for submitting the issue. We think this is argpars behavior, but we will make a sanity check to see.