-
Notifications
You must be signed in to change notification settings - Fork 42
Open
Labels
Description
- Added a not operator for bytes in hex strings. Example:
{01 ~02 03} -
forstatement can iterate over sets of literal strings (e.g.for any s in ("a", "b"): (pe.imphash() == s)) -
ofstatement can be used withat(e.g.any of them at 0) - Add parsing of .NET user types from .NET metadata stream in "dotnet" module
- Improve certificate parsing and validation in "pe" module
- Add
telfhash()function to "elf" module - Add
to_int()andto_string()functions to "math" module- NOTE:
to_int()functions are in thestringmodule instead
- NOTE:
For more information see the original release notes:
https://github.com/VirusTotal/yara/releases/tag/v4.3.0