-
Notifications
You must be signed in to change notification settings - Fork 27
Implement memory scanning action using YARA #164
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
63adc4d to
ac9834e
Compare
How is it possible? Doesn't it break the orphan rule? 🤔 |
584f4d5 to
ba13dc2
Compare
One of the errors was caused by a dependency introducing something like |
3415051 to
e7fcb07
Compare
The test does not pass without --nocapture for some reason
4b8832d to
9abc282
Compare
This PR adds VirusTotal/yara-x as an (optional) dependency and adds an action,
yara_scan_memorythat uses it to scan one or more running processes' memory using a specified YARA signature.The extra dependency introduced some other transitive dependencies that broke some test code (mostly due to the library bringing in some additional impl traits on standard types), so there are also some edits to unrelated files to fix those breakages.