yara_tools

yara_tools copied to clipboard

I want to `pip install yara_tools`.

silascutler

adding hex string to rule

1

Is there a workaround at the moment for adding a string of bytes to a rule in Yara's format? Looked around in documentation/examples and I haven't found anything. - Eg:...

bufu1003

Modify an existing rule

1

Hi, wondered if functionality to edit an existing rule (from str) was on the roadmap? I'd like to be able to add meta fields to my existing rules programmatically Cheers

geekscrapy

Unsurprisingly this routine is unnecessarily complicated. Code is hard to understand, needs better abstraction.

matonis

``` rule.add_strings(strings="HelloWorld",condition="$IDENTIFIER at 0") ``` This possibly relates to enhancing condition functionality, but the template for conditions has no idea to map integers assigned to unitialized string variables. Meaning, the...

matonis

Users might find value in inline comments for conditions.

matonis

The current design for condition groups might create some problems. Conditions might get complex enough to warrant its own object. This would enable unique processing of complex conditions without bogging...

matonis