Skip to content

Releases: VirusTotal/yara-x

v0.8.0

09 Sep 15:24
f3ecfba
Compare
Choose a tag to compare
  • Implement command fmt for automatic YARA code formatting.
  • Add --module-data option to scan command (#183).
  • Add --ignore-module option to scan and compile commands (0536024).
  • Implement cuckoo module for backward compatibility with YARA (#191).
  • More warnings for potentially slow rules (38ddfb1, 1db2190).

Contributors: @chudicek, @qjerome

v0.7.0

28 Aug 11:00
c4a1bb0
Compare
Choose a tag to compare
  • Better representation of flags in YAML output (aff398b).
  • Accept comparisons between boolean expression and integer constant (1dd3ade).
  • Add --print-meta option to scan command (#170).
  • Add --tag and --print-tags options to scan command for tag filtering and printing (#171).
  • Add --count option to scan command (#174).
  • Allow to specify the source's origin in the Golang, Python and C APIs.
  • API redesigned to expose more details about compiler errors and warnings.
  • BUGFIX: OOM errors while scanning some corrupted PE files (258e090).
  • BUGFIX: panics while scanning some corrupted PE files (5a6b944, 3f011ee, b82c930).

Contributors: @wxsBSD

v0.6.0

31 Jul 06:33
Compare
Choose a tag to compare
  • Implement new error-tolerant parser that fixes some existing issues like #136 and #150.
  • Scan command now can produce ndjson output. (#161)
  • BUGFIX: Handle non-ASCII spaces in filenames. (#163)

Contributors: @wxsBSD, @szabgab

v0.5.0

01 Jul 07:19
Compare
Choose a tag to compare

What's Changed

  • Parse Mach-O exports and add export_hash function to macho module (#132)
  • Add --disable-warnings option. Specific warnings can be disabled by using warning identifiers like slow_patterns, duplicate_import, unsatisfiable_expr, etc (#140).
  • Raise warning when a boolean expression is always true or false (5f6a1d7).
  • BUGFIX: fix multiple crashes in macho module.
  • BUGFIX: fix multiple crashes in pe module.

Contributors: @latonis

v0.4.0

29 May 11:58
Compare
Choose a tag to compare
  • Implement the --scan-list option for the scan command (21e8481).
  • Implement the --output option for the compile command (c7759f8).
  • Allow using non-global rules from global rules (865db1d).
  • Implement APIs for accessing rule metadata (9f90eaa, 1e816a7, 3508d53, 9ddbbbe).
  • Implement dylib and entitlement hashing in macho module (#93).
  • Allow multi-line string literals in rule metadata (#121 ).
  • BUGFIX: Fix stack overflow when rules have a lot of patterns and use the x of them statement (b134252).

Contributors: @latonis, @wxsBSD

v0.3.0

17 May 11:03
Compare
Choose a tag to compare

This is the first public beta for YARA-X.