Crate boreal_parser

Parser for YARA rules.

This crate is designed to be used by the boreal crate.

It exposes a single function, parse, which parses the contents of a YARA file.

Re-exports

pub use regex::Regex;

Modules

hex_string

AST objects related to hex strings.

regex

AST elements related to YARA regexes.

Structs

Error

Parsing error.

Expression

A parsed expression with associated span

Identifier

Parsed identifier used in expressions.

IdentifierOperation

Operation applied on an identifier.

Metadata

A metadata key-value, associated with a rule.

Rule

A Yara rule.

RuleSet

Set of multiple rules.

VariableDeclaration

String declared in a rule.

VariableFlags

Modifier flags, see VariableModifiers.

VariableModifiers

Modifiers applicable on a string.

VariableSet

Set of multiple variables.

YaraFile

A parsed Yara file.

Enums

ExpressionKind

An expression parsed in a Rule.

ForIterator

Iterator for a ‘for’ expression over an identifier.

ForSelection

Selection of variables in a ‘for’ expression.

IdentifierOperationType

Type of operation applied on an identifier.

ReadIntegerType

Integer read type, see ExpressionKind::ReadInteger.

VariableDeclarationValue

Value for a string associated with a rule.

YaraFileComponent

A top-level component of a Yara file.

Functions

parse

Parse a YARA file.