Here's an example of how part of yrrc works. Starting with these rules:
wxs@wxs-mbp yrrc % cat rules/test.yara
rule a {
meta:
sample = "24c422e681f1c1bd08286c7aaf5d23a5f088dcdb0b219806b3a9e579244f00c5"
condition:
true
}
<# | |
================ | |
PATCHCLEAN.PS1 | |
================= | |
Version 1.0 Patch Folder Cleaner by Greg Linares (@Laughing_Mantis) | |
This Tool will go through the patch folders created by PatchExtract.PS1 and look for files created older | |
than 30 days prior to the current date and move these to a sub folder named "OLD" in the patch folders. |
Moved: https://github.com/OALabs/hexcopy-ida |
Here's an example of how part of yrrc works. Starting with these rules:
wxs@wxs-mbp yrrc % cat rules/test.yara
rule a {
meta:
sample = "24c422e681f1c1bd08286c7aaf5d23a5f088dcdb0b219806b3a9e579244f00c5"
condition:
true
}
/* | |
VEH using process enumerator for Microsoft Windows | |
Released as open source by NCC Group Plc - http://www.nccgroup.com/ | |
Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com | |
Released under AGPL see LICENSE for more information | |
*/ |