MCPcopy Create free account
hub / github.com/codeyourweb/irma / PerformYaraScan

Function PerformYaraScan

yaraProcessing.go:15–22  ·  view source on GitHub ↗

PerformYaraScan use provided YARA rules and search for match in the given byte slice

(data *[]byte, rules *yara.Rules, verbose bool)

Source from the content-addressed store, hash-verified

13
14// PerformYaraScan use provided YARA rules and search for match in the given byte slice
15func PerformYaraScan(data *[]byte, rules *yara.Rules, verbose bool) yara.MatchRules {
16 result, err := YaraScan(*data, rules)
17 if err != nil && verbose {
18 logMessage(LOG_ERROR, "[ERROR]", err)
19 }
20
21 return result
22}
23
24// PerformArchiveYaraScan try to decompress archive and YARA scan every file in it
25func PerformArchiveYaraScan(path string, rules *yara.Rules, verbose bool) (matchs yara.MatchRules) {

Callers 2

FileAnalysisFunction · 0.85
MemoryAnalysisFunction · 0.85

Calls 2

YaraScanFunction · 0.85
logMessageFunction · 0.85

Tested by

no test coverage detected