Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adding basic yara functionality by default #174

Merged
merged 1 commit into from
Jun 15, 2021
Merged

adding basic yara functionality by default #174

merged 1 commit into from
Jun 15, 2021

Conversation

Derekt2
Copy link
Contributor

@Derekt2 Derekt2 commented Jun 15, 2021

Describe the change
Adds a rules.yara file to the backend, and mounts the file in the backend's /etc/yara directory to ensure there is at least one rule. Yara rules can be added without having to rebuild the container, just must restart before rescanning a file.

Describe testing procedures
I ran built strelka before and after changes to verify it works as intended.

Sample output
Changes the scan yara from "compiling error" to show the test rule result.
Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of and tested my code
  • I have commented my code, particularly in hard-to-understand areas
  • [] I have made corresponding changes to the documentation
  • My changes generate no new warnings

@Derekt2
Copy link
Contributor Author

Derekt2 commented Jun 15, 2021

image

@phutelmyer
Copy link
Contributor

No issues when building / testing.
Thanks @Derekt2!

@phutelmyer phutelmyer merged commit 12d5598 into target:master Jun 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants