March 25, 2015 | ||
---|---|---|
View 16d6953
yara: added clamav hexstr verification and handling yara: handles lack of 'wide' sigopt within load_oneyara yara: upgraded some suppressed debug messages to warningsKevin Lin authored on 2015/03/25 06:48:54 |
March 20, 2015 | ||
---|---|---|
View e10659a
YARA: implement basic string matching, temporarily disable simple YARA condition to lsig conversions.Steven Morgan authored on 2015/03/20 00:59:35 |
March 19, 2015 | ||
---|---|---|
View d255498
Add YARA condition evaluation function. Add support for YARA 'of' clauses.Steven Morgan authored on 2015/03/19 07:26:59 |
March 10, 2015 | ||
---|---|---|
View 16ec6d8
fullword modifier on regex changed to be closer to yaraKevin Lin authored on 2015/03/10 07:02:17 |
||
View 6dea5b0
integrated sigopts (modifiers) into pcre subsigs using '+' re-factored sigopts_handler() code TODO: wide support for regex stringsKevin Lin authored on 2015/03/10 06:17:15 |
March 7, 2015 | ||
---|---|---|
View 22b54fd
Revert "Add back a few #ifdef's to prevent unsupported YARA features from terminating with malformed database." - to be handled by pre-filtering the YARA rules.Steven Morgan authored on 2015/03/07 08:16:15 |
||
View 70b9c0f
Add back a few #ifdef's to prevent unsupported YARA features from terminating with malformed database.Steven Morgan authored on 2015/03/07 07:29:47 |
||
View e2617a2
Merge branch 'features/yara' of git.clam.sourcefire.com:/var/lib/git/clamav-devel into features/yaraSteven Morgan authored on 2015/03/07 07:11:00 |
||
View f51f42e
Capture YARA compiled condition string and anchor in struct cli_ac_lsig.Steven Morgan authored on 2015/03/07 07:10:47 |
||
View 311a0b1
updated PCRE subsig check on no PCRE support for ldb and yara fixed an issue where partial yara rules could be loaded reason: segfaults are badKevin Lin authored on 2015/03/07 05:14:15 |
||
View 06bd11e
fixed wildcard issues in yara->clamav conversionKevin Lin authored on 2015/03/07 02:40:24 |
February 27, 2015 | ||
---|---|---|
View f22d89e
added wide support for word marker char class reason: differs from what is expected in yara TODO: handle this case for all character classes/casesKevin Lin authored on 2015/02/27 01:21:34 |
February 26, 2015 | ||
---|---|---|
View 39d0a15
Use YARA arena for rule memory.Steven Morgan authored on 2015/02/26 04:52:33 |
||
View 4a05ba5
Merge branch 'features/yara' of git.clam.sourcefire.com:/var/lib/git/clamav-devel into features/yaraSteven Morgan authored on 2015/02/26 01:14:39 |
||
View 7f74910
parser and memory management improvements.Steven Morgan authored on 2015/02/26 01:14:27 |