yara-x 1.15.0

A pure Rust implementation of YARA.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

rule test_1 {
  strings:
    $a = "foo"
  condition:
    $a and #a == 1 and @a == 0
}

rule test_2 {
  strings:
    $a = "foo"
  condition:
    $a at 0
}

rule test_3 {
  strings:
    $a = "foo"
    $b = "bar"
  condition:
    for all of ($a, $b) : (
      $ at 0 or # > 0
    )
}