Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

YARA rule management #1

Open
deadbits opened this issue Sep 4, 2023 · 1 comment
Open

YARA rule management #1

deadbits opened this issue Sep 4, 2023 · 1 comment
Assignees
Labels
enhancement New feature or request yara YARA scanner and rules

Comments

@deadbits
Copy link
Owner

deadbits commented Sep 4, 2023

YARA rules should be managed via API and/or command line:

Add new rules
    Save to disk
    Enable rule in scanner
List enabled rules
    Name, tags, metadata
Remove rule

I can create a YARA "index" class that handles loading the rules, compiling rules and saving to disk, and pass the compiled rules to the yara scanner as needed. that way users can still add rules, etc via API without the scanner also needing to be enabled. right now yara rules are only loading when the scanner is enabled and loads, and theres no good way to reload if new rules are added.

@deadbits deadbits added enhancement New feature or request yara YARA scanner and rules labels Sep 4, 2023
@deadbits deadbits self-assigned this Sep 4, 2023
@deadbits
Copy link
Owner Author

Actually will Flask reload on its own if a file is added to the yara directory?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request yara YARA scanner and rules
Projects
None yet
Development

No branches or pull requests

1 participant