yara-python
yara-python copied to clipboard
VirusTotal
The Python interface for YARA
Extend the tuple that represents an instance of a match to include the xor key. This breaks all existing scripts that are unpacking the tuple, which I'm not very happy...
Hello, I am trying to install yara-python on my mac (from pypi, 4.0.2 version) which complaints about missing "lexer.h" header file during compilation. I found out that this header file...
when installing yara-python using pip method, I get this error, seems like that setup.py is not working on Windows, ``` pip install yara-python Defaulting to user installation because normal site-packages...
The latest version of yara-python is unable to compile rules with pe.imphash(): ```python # reproduce.py import yara print(yara.YARA_VERSION) rule = yara.compile(source='import "pe" rule my_imphash {condition: pe.imphash()=="eecc824da5b175f530705611127a6b41"}') ``` ```shell $ python3...
I set timeout argument in match function,When timeout,It do not work!
https://github.com/VirusTotal/yara-python/blob/master/setup.py#L353 "...15 days ago" vs https://github.com/VirusTotal/yara-python/releases/tag/v4.1.2 "...2 months ago (24 Aug)" 🤔 WTF?
Yara-python build should also accept `--with-crypto` option in addition to other yara build configuration options like `--enable-cuckoo`.
``` ➜ yara-python git:(master) ✗ python Python 2.7.6 (default, Jun 22 2015, 17:58:13) [GCC 4.8.2] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> import yara >>>...
When installing `yara-python` using `pip` on macOS, the following exception is raised: ``` $ python test.py Traceback (most recent call last): File "test.py", line 3, in rules = yara.compile(filepath='test.yar') yara.SyntaxError:...
Here is an example: ```python import yara def mycallback(data): print(data) return yara.CALLBACK_CONTINUE ``` matches = rules.match('/foo/bar/my_file', callback=mycallback, which_callbacks=yara.CALLBACK_MATCHES) The passed dictionary will be something like this: ```py { 'tags': ['foo',...
