Dotnet module added as a compile time option.
The dotnet module allows you to create more fine-grained rules
for .NET files by using attributes and features of the .NET file format.
http://yara.readthedocs.io/en/latest/modules/dotnet.html
Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
Libmagic dependency replaced with File so Yara magic module can
make use of magic patterns.
magic.mgc is installed on the target only when the File package
is selected.
Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
YARA is a tool aimed at (but not limited to) helping malware researchers
to identify and classify malware samples. With YARA you can create
descriptions of malware families based on textual or binary patterns.
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
Rosen Penev
Ashkan Jazayeri
Marko Ratkaj