yara-forge 0.1.0

A powerful Rust library for crafting, validating, and managing YARA rules
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

/// Shows how to create a simple YARA rule with basic string matching
///
/// This example demonstrates:
/// - Creating a rule with a descriptive name
/// - Adding metadata and tags
/// - Using string patterns
/// - Building and validating the rule
use yara_forge::{validation::validate_rule, RuleBuilder, ValidationOptions};

fn main() -> Result<(), Box<dyn std::error::Error>> {
    // Create a simple rule to detect a specific string pattern
    let rule = RuleBuilder::new("detect_pattern")
        .with_tag("example")
        .with_metadata("author", "YARA Forge")
        .with_metadata("description", "Example rule for basic string matching")
        .with_string("$pattern", "suspicious_string")?
        .with_condition("$pattern")
        .build()?;

    // Print the rule
    println!("Rule content:\n{}", rule);
    println!("\nValidating rule...");
    match validate_rule(&rule.to_string(), &ValidationOptions::default()) {
        Ok(_) => println!("Rule validation passed"),
        Err(e) => println!("Rule validation failed: {}", e),
    }

    Ok(())
}