yara-x 1.15.0

A pure Rust implementation of YARA.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

rule test_1 {
  strings:
    $aaa = { 61 61 61 }
  condition:
    all of them
}

rule test_2 {
   strings:
      $quoted_aaa = { 27 61 61 61 27 }
   condition:
      all of them
}

rule test_3 {
   strings:
      $quoted_aaa = { 22 61 61 61 22 }
   condition:
      all of them
}

rule test_4 {
   strings:
      $ = { 61 61 61 0D 0A 09 5C 62 62 62 }
   condition:
      all of them
}