You cannot post messages because only members can post, and you are not currently a member.
Description:
The YARA group
|
|
|
yara submitted to the openSUSE security repo
|
| |
This is just a quick note that I've packaged yara for openSUSE.
I just submitted it to the security repo. Likely it will show up
there in the next week or so. Hopefully it will be tested there for a
month or so, then submitted to the main distro for release this summer
in openSUSE 12.2.
You can download the current yara specfile from:... more »
|
|
Securitywall [some news]
|
| |
The securitywall [ [link] ] project
is building a team called [Security Team] we need some volonteers to
make up this team the volonteers must fall under these catagories:
the {Security Team} is the main team wich will be monitoring the
projects progress and security. The team will lead all teams to come... more »
|
|
feature request: white-space support in strings
|
| |
I would like to be able to make rules like:
rule longHexString {
strings:
$long = {
01 02 03 04
01 02 03 04
01 02 03 04
}
condition: $long
...
Currently, I get an error if I try to make my hex strings multiple
lines (doesn't look bad here, but my signatures are 100's of bytes... more »
|
|
RE2 support for Windows?
|
| |
Any plans to get RE2 support for Windows? Only the YARA Linux code is
using RE2, and according to the RE2 project, they don't have plans to
support Windows, but would welcome it. Is RE2 that much faster? I
could port RE2 to Windows and introduce RE2 to the YARA Windows code
if needed.
|
|
Compiled YARA 1.5 as 64-bit lib
|
| |
I'm working on a project I'm calling OpenHIPS (an open-source Host
Intrusion Prevention System). I wanted the ability to scan memory for
shell code, so I integrated YARA, which meant I needed both 32-bit and
64-bit library files of YARA, because my code is compiled to a DLL
that gets loaded into each process (using app_init) and the DLL bit... more »
|
No more topics in this group.
|
|