Function YaraScan

yaraProcessing.go:127–132

YaraScan use libyara to scan the specified content with a compiled rule

(content []byte, rules *yara.Rules)

// YaraScan use libyara to scan the specified content with a compiled rule
func YaraScan(content []byte, rules *yara.Rules) (match yara.MatchRules, err error) {
	sc, _ := yara.NewScanner(rules)
	var m yara.MatchRules
	err = sc.SetCallback(&m).ScanMem(content)
	return m, err
}