yara-x 1.15.0

A pure Rust implementation of YARA.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

import "cuckoo"

rule checkip {
	condition:
	  cuckoo.network.http_request(/.*checkip.*/)
}

rule checkip_get {
	condition:
	  cuckoo.network.http_get(/.*checkip.*/)
}

rule checkip_post {
	condition:
	  cuckoo.network.http_post(/.*checkip.*/)
}

rule checkip_dns {
	condition:
	  cuckoo.network.dns_lookup(/.*checkip.*/)
}

rule indy_user_agent {
	condition:
	  cuckoo.network.http_user_agent(/.*Indy Library.*/)
}