yara

package module

Go to main page

Versions in this module

v4

v4.3.2

Jun 1, 2023

v4.3.1

May 12, 2023

v4.3.0

Mar 27, 2023

Changes in this version

+ type ScanCallbackTooManyMatches interface

+ TooManyMatches func(*ScanContext, *Rule, string) (bool, error)

v4.2.4

Aug 3, 2022

v4.2.3

May 5, 2022

v4.2.2

Apr 30, 2022

v4.2.1

Apr 8, 2022

v4.2.0

Mar 11, 2022

Changes in this version

+ const ConfigMaxProcessMemoryChunk

type CompilerMessage

+ Rule *Rule

+ type ScanCallbackConsoleLog interface

+ ConsoleLog func(*ScanContext, string)

v4.1.0

May 10, 2021

Changes in this version

+ type MemoryBlockIteratorWithFilesize interface

+ Filesize func() uint64

v4.0.6

Apr 27, 2021

v4.0.5

Mar 23, 2021

v4.0.4

Dec 23, 2020

v4.0.3

Nov 16, 2020

v4.0.2

Jun 11, 2020

v4.0.1

Jun 10, 2020

Changes in this version

+ const ConfigMaxMatchData

+ const ConfigMaxStringsPerRule

+ const ConfigStackSize

+ const ScanFlagsFastMode

+ const ScanFlagsProcessMemory

+ func Finalize() error

+ func GetConfiguration(name ConfigName) (interface{}, error)

+ func SetConfiguration(name ConfigName, src interface{}) error

+ type Compiler struct

+ Errors []CompilerMessage

+ Warnings []CompilerMessage

+ func NewCompiler() (*Compiler, error)

+ func (c *Compiler) AddFile(file *os.File, namespace string) (err error)

+ func (c *Compiler) AddString(rules string, namespace string) (err error)

+ func (c *Compiler) DefineVariable(identifier string, value interface{}) (err error)

+ func (c *Compiler) Destroy()

+ func (c *Compiler) DisableIncludes()

+ func (c *Compiler) GetRules() (*Rules, error)

+ func (c *Compiler) SetIncludeCallback(cb CompilerIncludeFunc)

+ type CompilerIncludeFunc func(name, filename, namespace string) []byte

+ type CompilerMessage struct

+ Filename string

+ Line int

+ Text string

+ type ConfigName uint32

+ type Error int

+ func (e Error) Error() string

+ type Match struct

+ func (m *Match) Base() int64

+ func (m *Match) Data() []byte

+ func (m *Match) Offset() int64

+ type MatchRule struct

+ Metas []Meta

+ Namespace string

+ Rule string

+ Strings []MatchString

+ Tags []string

+ type MatchRules []MatchRule

+ func (mr *MatchRules) RuleMatching(sc *ScanContext, r *Rule) (abort bool, err error)

+ type MatchString struct

+ Base uint64

+ Data []byte

+ Name string

+ Offset uint64

+ type MemoryBlock struct

+ Base uint64

+ FetchData func([]byte)

+ Size uint64

+ type MemoryBlockIterator interface

+ First func() *MemoryBlock

+ Next func() *MemoryBlock

+ type Meta struct

+ Identifier string

+ Value interface{}

+ type Object struct

+ type Rule struct

+ func (r *Rule) Disable()

+ func (r *Rule) Enable()

+ func (r *Rule) Identifier() string

+ func (r *Rule) IsGlobal() bool

+ func (r *Rule) IsPrivate() bool

+ func (r *Rule) Metas() (metas []Meta)

+ func (r *Rule) Namespace() string

+ func (r *Rule) Strings() (strs []String)

+ func (r *Rule) Tags() (tags []string)

+ type RuleProfilingInfo struct

+ Cost uint64

+ type Rules struct

+ func Compile(rules string, variables map[string]interface{}) (r *Rules, err error)

+ func LoadRules(filename string) (*Rules, error)

+ func MustCompile(rules string, variables map[string]interface{}) (r *Rules)

+ func ReadRules(rd io.Reader) (*Rules, error)

+ func (r *Rules) DefineVariable(identifier string, value interface{}) (err error)

+ func (r *Rules) Destroy()

+ func (r *Rules) GetRules() (rv []Rule)

+ func (r *Rules) Save(filename string) (err error)

+ func (r *Rules) ScanFile(filename string, flags ScanFlags, timeout time.Duration, cb ScanCallback) (err error)

+ func (r *Rules) ScanFileDescriptor(fd uintptr, flags ScanFlags, timeout time.Duration, cb ScanCallback) (err error)

+ func (r *Rules) ScanMem(buf []byte, flags ScanFlags, timeout time.Duration, cb ScanCallback) (err error)

+ func (r *Rules) ScanMemBlocks(mbi MemoryBlockIterator, flags ScanFlags, timeout time.Duration, ...) (err error)

+ func (r *Rules) ScanProc(pid int, flags ScanFlags, timeout time.Duration, cb ScanCallback) (err error)

+ func (r *Rules) Write(wr io.Writer) (err error)

+ type ScanCallback interface

+ RuleMatching func(*ScanContext, *Rule) (bool, error)

+ type ScanCallbackFinished interface

+ ScanFinished func(*ScanContext) (bool, error)

+ type ScanCallbackModuleImport interface

+ ImportModule func(*ScanContext, string) ([]byte, bool, error)

+ type ScanCallbackModuleImportFinished interface

+ ModuleImported func(*ScanContext, *Object) (bool, error)

+ type ScanCallbackNoMatch interface

+ RuleNotMatching func(*ScanContext, *Rule) (bool, error)

+ type ScanContext struct

+ type ScanFlags int

+ type Scanner struct

+ Callback ScanCallback

+ func NewScanner(r *Rules) (*Scanner, error)

+ func (s *Scanner) DefineVariable(identifier string, value interface{}) (err error)

+ func (s *Scanner) Destroy()

+ func (s *Scanner) GetLastErrorRule() (r *Rule)

+ func (s *Scanner) GetLastErrorString() (r *String)

+ func (s *Scanner) GetProfilingInfo() (rpis []RuleProfilingInfo)

+ func (s *Scanner) ResetProfilingInfo()

+ func (s *Scanner) ScanFile(filename string) (err error)

+ func (s *Scanner) ScanFileDescriptor(fd uintptr) (err error)

+ func (s *Scanner) ScanMem(buf []byte) (err error)

+ func (s *Scanner) ScanMemBlocks(mbi MemoryBlockIterator) (err error)

+ func (s *Scanner) ScanProc(pid int) (err error)

+ func (s *Scanner) SetCallback(cb ScanCallback) *Scanner

+ func (s *Scanner) SetFlags(flags ScanFlags) *Scanner

+ func (s *Scanner) SetTimeout(timeout time.Duration) *Scanner

+ type String struct

+ func (s *String) Identifier() string

+ func (s *String) Matches(sc *ScanContext) (matches []Match)

v4.0.1-pre1

Jun 11, 2020

Other modules containing this package

github.com/hillu/go-yara

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL