Re: [Clamav-devel] Yara language version, ClamAV documentation.

2021-06-15 Thread Micah Snyder (micasnyd)
e- > From: clamav-devel On Behalf Of > G.W. Haywood > Sent: Thursday, June 10, 2021 3:51 AM > To: clamav-devel@lists.clamav.net > Subject: Re: [Clamav-devel] Yara language version, ClamAV documentation. > > Hi there, > > On Mon, 24 May 2021, G.W. Haywood wrote:

Re: [Clamav-devel] Yara language version, ClamAV documentation.

2021-06-10 Thread G.W. Haywood
Hi there, On Mon, 24 May 2021, G.W. Haywood wrote: ... I'm not sure if the 'word boundary' atoms (\b, \B) are supported or not - I don't even know how to find out, except perhaps at the risk of crashing clamd. I *think* I managed to do that with bad Yara rule. :( ... Now I'm sure. Micah, wo

[Clamav-devel] Yara language version, ClamAV documentation.

2021-05-24 Thread G.W. Haywood
Hi there, The documentation on ClamAV's implementation of Yara points to http://plusvic.github.io/yara/ which describes several important differences between the different versions of what might be called the reference Yara engine. When we write Yara rules, it's obviously important to know whi