September 18, 2015
View 46a35ab

mass update of copyright headers

Mickey Sola authored on 2015/09/18 02:41:26
July 24, 2015
View e7b3198

bb#9858 - added target 14 for binary (unidentified) files

Kevin Lin authored on 2015/07/24 05:37:15
June 20, 2015
View 7665e02

Add support for YARA private rules and referencing other rules in a YARA condition.

Steven Morgan authored on 2015/06/20 05:33:59
March 31, 2015
View b7999b8

YARA: capture offsets in matcher and use for processing YARA condition 'at' clauses.

Steven Morgan authored on 2015/03/31 06:12:01
March 7, 2015
View f51f42e

Capture YARA compiled condition string and anchor in struct cli_ac_lsig.

Steven Morgan authored on 2015/03/07 07:10:47
March 4, 2015
View 9de4005

refactor and simplify cli_lsig_eval, add new function cli_exp_eval to loop thru the lsig table and call either lsig_eval or yara_eval.

Steven Morgan authored on 2015/03/04 09:25:13
February 12, 2015
View b5b3fec

unioned lsig logic and future yara conditional

Kevin Lin authored on 2015/02/12 03:36:43
February 11, 2015
View 3e265c4

added direct memory freeing of cli_ac_list cli_ac_pattlist renamed to cli_ac_list

Kevin Lin authored on 2015/02/11 02:23:51
February 10, 2015
View 23d7c6e

removed nocase changes to ac tree operation

Kevin Lin authored on 2015/02/10 07:22:45
February 7, 2015
View 7fc5eab

finished support for AC trie nocase variant added check to prevent adding nocase signatures to case-sensitive AC tries

Kevin Lin authored on 2015/02/07 04:13:20
February 6, 2015
View a02acd5

[WIP] added nocase support to clamav ac algorithm

Kevin Lin authored on 2015/02/06 13:52:18
September 10, 2014
View 7ab4eec

pcre: support for clamav styled offsets pcre: added encompass ('e') option to matcher

Kevin Lin authored on 2014/09/10 06:14:12
August 30, 2014
View 35a05ff

pcre: update matcher structure to allow for additional fields pcre: changed trigger from content match to logical trigger

Kevin Lin authored on 2014/08/30 03:57:09
August 26, 2014
View 7afaa9b

pcre: encased pcre segments in macros to fix build without pcre support

Kevin Lin authored on 2014/08/26 04:07:30
August 23, 2014
View 5fa7336

pcre: support and linking for parsing and freeing

Kevin Lin authored on 2014/08/23 03:39:17