dissect.target icon indicating copy to clipboard operation
dissect.target copied to clipboard

Specific order of args specified to Yara hits on itself.

Open nmhawry opened this issue 2 months ago • 1 comments

When running the following command, if an argument is placed between --rules and the target path, yara will run the rule file against itself instead of file.txt in the example below.

target-query -f yara --rules <rule_path> --direct file.txt

however, when adding the equal sign to rules, it works correctly:

target-query -f yara --rules=<rule_path> --direct file.txt

nmhawry avatar Oct 16 '25 14:10 nmhawry

Hi @nmhawry, thank you for submitting the issue. We think this is argpars behavior, but we will make a sanity check to see.

EinatFox avatar Oct 21 '25 12:10 EinatFox