Support for more recent versions of YARA?

[xorhex]

First, a big THANK YOU to the folks at AVAST for releasing and maintaining this plugin. :muscle:

I found myself making use of the pe.import_rva function and discovered that Unrecognized identifier 'import_rva' referenced (Yaramod) was shown. Guessing this is probably an issue with Yaramod but was curious to know if updated YARA support is planned to add these newer YARA features?

Checked my install and it reads yls-1.4.1 yls-yara-1.4.1.

Thanks!

[MatejKastak]

Hi @xorhex, glad you like YLS :)

Indeed this is more of a request for avast/yaramod.

The support for new YARA version is definitely planned, but currently we did not have much bandwidth to finish that yet.

Looking at the current state, we are even lacking support for v4.3.0 :/ hopefully we will be able to address that in the near future.