cubixle/packages
1
0
Fork 0
mirror of https://github.com/novatiq/packages.git synced 2026-04-30 15:38:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

yara: add dotnet module

Browse Source 
Dotnet module added as a compile time option.
The dotnet module allows you to create more fine-grained rules
for .NET files by using attributes and features of the .NET file format.
http://yara.readthedocs.io/en/latest/modules/dotnet.html

Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
This commit is contained in:
Ashkan Jazayeri
2018-06-05 22:31:14 +04:30
parent 5ca68c0cd3
commit 8d20a24cf5
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
utils/yara/Config.in
+7
View File
@@ -12,5 +12,12 @@ if PACKAGE_yara
default n default n
help help
Create rules based on behavioral info generated by a Cuckoo sandbox Create rules based on behavioral info generated by a Cuckoo sandbox
config YARA_module_dotnet
bool "Dotnet module"
default n
help
The dotnet module allows you to create more fine-grained rules
for .NET files by using attributes and features of the .NET file format
endif endif
utils/yara/Makefile
+1 -1
View File
@@ -41,7 +41,7 @@ define Package/yara/description
endef endef
CONFIGURE_ARGS += \ CONFIGURE_ARGS += \
--disable-dotnet \ $(if $(CONFIG_YARA_module_dotnet),--enable,--disable)-dotnet \
$(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \ $(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \
$(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo $(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo