yararules

Documentation

Index

• type YaraRules
  • func New(rulePath string) *YaraRules
  • func (yr *YaraRules) Compile(purpose int, failOnCompileWarning bool) error
  • func (yr *YaraRules) DefineVariable(name string, value any) error
  • func (yr *YaraRules) NewScanner() (*yara.Scanner, error)
  • func (yr *YaraRules) ScanFileDescriptor(fd uintptr, flags yara.ScanFlags, timeout time.Duration, cb yara.ScanCallback) error
  • func (yr *YaraRules) ScanMem(buf []byte, flags yara.ScanFlags, timeout time.Duration, cb yara.ScanCallback) error

Types

type YaraRules

type YaraRules struct {
	RulesPath string
	// contains filtered or unexported fields
}

NOTE:::Do not expose the rules Instead add a wrapper here protected with mutex

func New

func New(rulePath string) *YaraRules

func (*YaraRules) Compile

func (yr *YaraRules) Compile(purpose int, failOnCompileWarning bool) error

Not thread safe function.Must only be called during the init.

func (*YaraRules) DefineVariable

func (yr *YaraRules) DefineVariable(name string, value any) error

func (*YaraRules) NewScanner

func (yr *YaraRules) NewScanner() (*yara.Scanner, error)

func (*YaraRules) ScanFileDescriptor

func (yr *YaraRules) ScanFileDescriptor(fd uintptr, flags yara.ScanFlags,
	timeout time.Duration, cb yara.ScanCallback) error

func (*YaraRules) ScanMem

func (yr *YaraRules) ScanMem(buf []byte, flags yara.ScanFlags,
	timeout time.Duration, cb yara.ScanCallback) error