YARA-X 1.21.0 Release – SANS Internet Storm Center

YARA-X’s 1.21.0 release brings 5 improvements and 4 bugfixes.

One improvement is allowing stdin for CLI option –scan-list.

This allows one to generate a list of folders to scan, and pass it via a pipe. Like this example (Windows) to scan all folders with “sample” in their name:

dir /s /b /a:d c:\*samples* | yr.exe scan --scan-list - rules.yara

Didier Stevens

Senior handler

blog.DidierStevens.com