Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

yara: add dotnet module

Browse source 
Dotnet module added as a compile time option.
The dotnet module allows you to create more fine-grained rules
for .NET files by using attributes and features of the .NET file format.
http://yara.readthedocs.io/en/latest/modules/dotnet.html

Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
This commit is contained in:
Ashkan Jazayeri 2018-06-05 22:31:14 +04:30
parent 5ca68c0cd3
commit 8d20a24cf5
2 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
utils/yara/Config.in
View file

@ -12,5 +12,12 @@ if PACKAGE_yara
default n default n
help help
Create rules based on behavioral info generated by a Cuckoo sandbox Create rules based on behavioral info generated by a Cuckoo sandbox
config YARA_module_dotnet
bool "Dotnet module"
default n
help
The dotnet module allows you to create more fine-grained rules
for .NET files by using attributes and features of the .NET file format
endif endif

2
utils/yara/Makefile
View file

@ -41,7 +41,7 @@ define Package/yara/description
endef endef
CONFIGURE_ARGS += \ CONFIGURE_ARGS += \
--disable-dotnet \ $(if $(CONFIG_YARA_module_dotnet),--enable,--disable)-dotnet \
$(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \ $(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \
$(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo $(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo