logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

yarac - compile rules to yara

Author

yarac was written by Victor M. Alvarez <vmalvarez@virustotal.com>.  This manual page was written by  Joao
       Eriberto Mota Filho <eriberto@eriberto.pro.br> for the Debian project (but may be used by others).

YARAC 2.0                                           Jan 2014                                            YARAC(1)

Description

       To  invoke YARA you will need two things: a file with the rules you want to use (either in source code or
       compiled form) and the target to be scanned.  The target can be a file, a folder, or a process.

       Rule files can be passed directly in source code form, or can be previously compiled with the yarac tool.
       You may prefer to use your rules in compiled form if you are going to invoke YARA multiple times with the
       same rules.  This way you’ll save time, because for YARA is faster to load compiled rules than  compiling
       the same rules over and over again.

       The  rules  will  be  applied  to  the target specified as the last argument to YARA, if it’s a path to a
       directory all the files contained in it will be scanned.

Example

       The -d is used to define external variables. For example:

       -d flag=true

       -d beast=666

       -d name="James Bond"

Name

yarac - compile rules to yara

Options

-d<identifier>=<value>
              define external variable.

       -w--no-warnings
              Disable warnings.

           --fail-on-warnings
              Treat warnings as errors. Has no effect if used with --no-warnings.-v--version
              Show version information.

See Also

yara(1)

Synopsis

yarac [OPTION]... [RULE_FILE]... OUTPUT_FILE

See Also