Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

YARA-X Support #289

Open
davidmagnotti opened this issue Dec 17, 2024 · 3 comments
Open

YARA-X Support #289

davidmagnotti opened this issue Dec 17, 2024 · 3 comments
Assignees
Labels
assess We still haven't decided if this will be worked on or not enhancement New feature or request service-yara Related to YARA service

Comments

@davidmagnotti
Copy link

Is your feature request related to a problem? Please describe.'
YARA-X is a Rust implementation of YARA from VirusTotal that "intends to be the replacement for YARA, and it has been designed with usability, backward-compatibility, and performance in mind" (https://virustotal.github.io/yara-x/docs/intro/yara-x-vs-yara/).

Describe the solution you'd like
Considering YARA-X is likely to be the replacement for YARA, I wanted to raise that AL4 consider adding experimental support for YARA-X.

Describe alternatives you've considered
Unfortunately, I don't think there are any alternatives.

Additional context
Read more about YARA-X here: https://virustotal.github.io/yara-x/docs/intro/yara-x-vs-yara/

@davidmagnotti davidmagnotti added assess We still haven't decided if this will be worked on or not enhancement New feature or request labels Dec 17, 2024
@cccs-rs cccs-rs added the service-yara Related to YARA service label Dec 17, 2024
@cccs-rs cccs-rs self-assigned this Dec 17, 2024
@cccs-rs
Copy link
Contributor

cccs-rs commented Dec 17, 2024

I assume this request pertains to Assemblyline's YARA service to switch from yara-python to yara-x?

@davidmagnotti
Copy link
Author

Apologies, correct. I can move this issue to the assemblyline-service-yara repository if that makes more sense?

@cccs-rs
Copy link
Contributor

cccs-rs commented Dec 17, 2024

No no, that's fine. All issues relating to Assemblyline should be posted here.

Just wanted to make sure the scope of the request. 😁

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
assess We still haven't decided if this will be worked on or not enhancement New feature or request service-yara Related to YARA service
Projects
None yet
Development

No branches or pull requests

2 participants