Yara python module – part 003 .

You can test your yara rules by using first the yara command tool from windows or linux.
The last version come with source code :

For example this rule show us how to find files by size:

This rule find files by specify the size conditions MB, KB and return the result.
Then can be tested with yara command tool:

This show us the rule is working well and can be used also with yara python module.

admin

born 1976, Falticeni , Suceava , Romania
Posted in All, Commands, Python, YARA. Tagged with , , , , , .