Releases: VirusTotal/yara-x
Releases Β· VirusTotal/yara-x
v0.8.0
- Implement command
fmt
for automatic YARA code formatting. - Add
--module-data
option toscan
command (#183). - Add
--ignore-module
option toscan
andcompile
commands (0536024). - Implement
cuckoo
module for backward compatibility with YARA (#191). - More warnings for potentially slow rules (38ddfb1, 1db2190).
v0.7.0
- Better representation of flags in YAML output (aff398b).
- Accept comparisons between boolean expression and integer constant (1dd3ade).
- Add
--print-meta
option toscan
command (#170). - Add
--tag
and--print-tags
options toscan
command for tag filtering and printing (#171). - Add
--count
option toscan
command (#174). - Allow to specify the source's origin in the Golang, Python and C APIs.
- API redesigned to expose more details about compiler errors and warnings.
- BUGFIX: OOM errors while scanning some corrupted PE files (258e090).
- BUGFIX: panics while scanning some corrupted PE files (5a6b944, 3f011ee, b82c930).
Contributors: @wxsBSD
v0.6.0
v0.5.0
What's Changed
- Parse Mach-O exports and add
export_hash
function tomacho
module (#132) - Add
--disable-warnings
option. Specific warnings can be disabled by using warning identifiers likeslow_patterns
,duplicate_import
,unsatisfiable_expr
, etc (#140). - Raise warning when a boolean expression is always
true
orfalse
(5f6a1d7). - BUGFIX: fix multiple crashes in
macho
module. - BUGFIX: fix multiple crashes in
pe
module.
Contributors: @latonis
v0.4.0
- Implement the
--scan-list
option for thescan
command (21e8481). - Implement the
--output
option for thecompile
command (c7759f8). - Allow using non-global rules from global rules (865db1d).
- Implement APIs for accessing rule metadata (9f90eaa, 1e816a7, 3508d53, 9ddbbbe).
- Implement dylib and entitlement hashing in
macho
module (#93). - Allow multi-line string literals in rule metadata (#121 ).
- BUGFIX: Fix stack overflow when rules have a lot of patterns and use the
x of them
statement (b134252).
v0.3.0
This is the first public beta for YARA-X.