Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for YARA v4.3.0 #245

Open
7 tasks
MatejKastak opened this issue Apr 18, 2023 · 1 comment
Open
7 tasks

Add support for YARA v4.3.0 #245

MatejKastak opened this issue Apr 18, 2023 · 1 comment

Comments

@MatejKastak
Copy link
Member

  • Added a not operator for bytes in hex strings. Example: {01 ~02 03}
  • for statement can iterate over sets of literal strings (e.g. for any s in ("a", "b"): (pe.imphash() == s))
  • of statement can be used with at (e.g. any of them at 0)
  • Add parsing of .NET user types from .NET metadata stream in "dotnet" module
  • Improve certificate parsing and validation in "pe" module
  • Add telfhash() function to "elf" module
  • Add to_int() and to_string() functions to "math" module
    • NOTE: to_int() functions are in the string module instead

For more information see the original release notes:
https://github.com/VirusTotal/yara/releases/tag/v4.3.0

@xorhex
Copy link

xorhex commented Sep 27, 2023

+1 for telfhash() 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants