yara-x 1.15.0

A pure Rust implementation of YARA.
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
RULE test
  13: FOR_IN -- hash: 0x96423d1fc9f13492 -- parent: None 
    0: CONST integer(1) -- parent: 13 
    1: CONST integer(10) -- parent: 13 
    12: WITH -- hash: 0x2fa6e67ac30fd47a -- parent: 13 
      6: FN_CALL uint32@i@i:R0:4294967295u -- hash: 0xb24700199f93dab8 -- parent: 12 
        5: ADD -- hash: 0x685e7a2ba5a36f1d -- parent: 6 
          3: PATTERN_OFFSET PatternIdx(0) INDEX -- hash: 0x7cb6e22690df7f1b -- parent: 5 
            2: SYMBOL Var { var: Var { frame_id: 1, ty: integer, index: 5 }, type_value: integer(unknown) } -- parent: 3 
          4: CONST integer(16) -- parent: 5 
      8: FN_CALL uint32be@i@i:R0:4294967295u -- hash: 0x36dbf5f6d8719ced -- parent: 12 
        7: SYMBOL Var { var: Var { frame_id: 2, ty: integer, index: 7 }, type_value: integer(unknown) } -- parent: 8 
      11: NE -- hash: 0xe0b33818592dcf55 -- parent: 12 
        9: SYMBOL Var { var: Var { frame_id: 2, ty: integer, index: 8 }, type_value: integer(unknown) } -- parent: 11 
        10: CONST integer(1347092738) -- parent: 11