applications/forensics tools

yara - yara - find files matching patterns and rules written in a special-purpose language

License: GPL
Yara scans the given FILE or the process indentified by PID looking if
it matches the patterns and rules provided in a special purpose-lan‐
guage. The rules are read from RULEFILEs or standard input.


yara-1.7.2-1.fc16.x86_64 [195 KiB] Changelog by Lawrence R. Rogers (2013-12-02):
* Release 1.7.2-1
	* BUGFIX: Regular expressions marked as both "wide" and "ascii" were treated as just "wide"
	* BUGFIX: Bug in "n of (<string_set>)" operator
	* BUGFIX: Bug in get_process_memory could cause infinite loop
yara-1.7-1.fc16.x86_64 [198 KiB] Changelog by Lawrence R. Rogers (2013-03-29):
* Release 1.7-1
	* faster compilation
	* added suport for modulus (%) and bitwise xor (|) operators
	* better hashing of regular expressions
	* BUGFIX: yara-python segfault when using dir() on Rules and Match classes
	* BUGFIX: Integer overflow causing infinite loop
	* BUGFIX: Handling strings containing \x00 characters correctly
	* BUGFIX: Regular expressions not matching at the end of the file when compiled with RE2
	* BUGFIX: Memory leaks
	* BUGFIX: File handle leaks

Listing created by Repoview-0.6.6-1.el6