yara: add package

YARA is a tool aimed at (but not limited to) helping malware researchers
to identify and classify malware samples. With YARA you can create
descriptions of malware families based on textual or binary patterns.

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
This commit is contained in:
Marko Ratkaj
2017-04-18 15:35:29 +02:00
parent 9e265cfa1b
commit 81edf42d94
2 changed files with 87 additions and 0 deletions
+16
View File
@@ -0,0 +1,16 @@
if PACKAGE_yara
comment "Optional modules"
config YARA_module_magic
bool "Magic module"
default y
help
Identify the type of the file based on the output of file command
config YARA_module_cuckoo
bool "Cuckoo module"
default n
help
Create rules based on behavioral info generated by a Cuckoo sandbox
endif