September 18, 2015 | ||
---|---|---|
View 46a35ab
mass update of copyright headersMickey Sola authored on 2015/09/18 02:41:26 |
July 24, 2015 | ||
---|---|---|
View e7b3198
bb#9858 - added target 14 for binary (unidentified) filesKevin Lin authored on 2015/07/24 05:37:15 |
June 20, 2015 | ||
---|---|---|
View 7665e02
Add support for YARA private rules and referencing other rules in a YARA condition.Steven Morgan authored on 2015/06/20 05:33:59 |
March 31, 2015 | ||
---|---|---|
View b7999b8
YARA: capture offsets in matcher and use for processing YARA condition 'at' clauses.Steven Morgan authored on 2015/03/31 06:12:01 |
March 7, 2015 | ||
---|---|---|
View f51f42e
Capture YARA compiled condition string and anchor in struct cli_ac_lsig.Steven Morgan authored on 2015/03/07 07:10:47 |
March 4, 2015 | ||
---|---|---|
View 9de4005
refactor and simplify cli_lsig_eval, add new function cli_exp_eval to loop thru the lsig table and call either lsig_eval or yara_eval.Steven Morgan authored on 2015/03/04 09:25:13 |
February 12, 2015 | ||
---|---|---|
View b5b3fec
unioned lsig logic and future yara conditionalKevin Lin authored on 2015/02/12 03:36:43 |
February 11, 2015 | ||
---|---|---|
View 3e265c4
added direct memory freeing of cli_ac_list cli_ac_pattlist renamed to cli_ac_listKevin Lin authored on 2015/02/11 02:23:51 |
February 10, 2015 | ||
---|---|---|
View 23d7c6e
removed nocase changes to ac tree operationKevin Lin authored on 2015/02/10 07:22:45 |
February 7, 2015 | ||
---|---|---|
View 7fc5eab
finished support for AC trie nocase variant added check to prevent adding nocase signatures to case-sensitive AC triesKevin Lin authored on 2015/02/07 04:13:20 |
February 6, 2015 | ||
---|---|---|
View a02acd5
[WIP] added nocase support to clamav ac algorithmKevin Lin authored on 2015/02/06 13:52:18 |
September 10, 2014 | ||
---|---|---|
View 7ab4eec
pcre: support for clamav styled offsets pcre: added encompass ('e') option to matcherKevin Lin authored on 2014/09/10 06:14:12 |
August 30, 2014 | ||
---|---|---|
View 35a05ff
pcre: update matcher structure to allow for additional fields pcre: changed trigger from content match to logical triggerKevin Lin authored on 2014/08/30 03:57:09 |
August 26, 2014 | ||
---|---|---|
View 7afaa9b
pcre: encased pcre segments in macros to fix build without pcre supportKevin Lin authored on 2014/08/26 04:07:30 |
August 23, 2014 | ||
---|---|---|
View 5fa7336
pcre: support and linking for parsing and freeingKevin Lin authored on 2014/08/23 03:39:17 |