Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow obtaining global symbols (like modules, their functions, attributes) even without created YaraFile #97

Closed
metthal opened this issue May 7, 2020 · 1 comment
Assignees

Comments

@metthal
Copy link
Member

metthal commented May 7, 2020

The motivation here is to be able to obtain list of all functions in certain module without creating YaraFile object. We should be able to do something like yaramod::getSymbol("cuckoo") and it would search only for global symbols. Alternatively, you would also be able to provide Import Features in there if needed. This would be useful for listing those symbols (for example for code suggestion purposes) and not having to create dummy YaraFile object with all imports.

@TadeasKucera
Copy link
Contributor

In #143 we introduced dynamic modules from JSON and also a method Yaramod::modules that enables access to all symbols from used YARA modules.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants