yara-x 1.15.0

A pure Rust implementation of YARA.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13

rule test_1 {
  strings:
    $a = {00 [1-10] 01}
  condition:
    $a
}

rule test_2 {
	strings:
	  $a = /a.*/
	condition:
	  $a
}