Skip to content

MISP-modules: Enhancements to YARA Syntax Validation (v3.0.4)

Choose a tag to compare

@github-actions github-actions released this 23 Nov 07:16
· 183 commits to main since this release
v3.0.4
3244fd5

This minor release, v3.0.4, focuses primarily on internal code quality and validation logic, ensuring a more robust experience, especially concerning YARA rule syntax.

Key Improvements

The majority of changes involve a significant refactor of the YARA syntax validator. This unification and refinement of the validation logic brings several benefits:

  • Improved Validation Logic: The logic has been centralized and unified within a single handler function for better maintainability and reliability.
  • Enhanced YARA Handling: Improvements include better support for handling auto-imports and external YARA variables.
  • Code Quality: Several minor fixes were applied to improve code readability, fix indentation issues in return statements, and update version/author information within the validator module.

These changes help ensure that YARA rules are validated more accurately and consistently within the platform.