Yara python module – part 003 .

By | 21/01/2018

You can test your yara rules by using first the yara command tool from windows or linux.
The last version come with source code :

For example this rule show us how to find files by size:

This rule find files by specify the size conditions MB, KB and return the result.
Then can be tested with yara command tool:

This show us the rule is working well and can be used also with yara python module.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.