Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
YARAC(1)		     compile rules to yara		      YARAC(1)

NAME
       yarac - compile rules to	yara

SYNOPSIS
       yarac [OPTION]... [RULE_FILE]...	OUTPUT_FILE

DESCRIPTION
       To invoke YARA you will need two	things:	a file with the	rules you want
       to  use	(either	 in source code	or compiled form) and the target to be
       scanned.	 The target can	be a file, a folder, or	a process.

       Rule files can be passed	directly in source code	form, or can be	previ-
       ously compiled with the yarac tool. You may prefer to use your rules in
       compiled	form if	you are	going to invoke	YARA multiple times  with  the
       same  rules.   This  way	youll save time, because for YARA is faster to
       load compiled rules than	compiling the same rules over and over again.

       The rules will be applied to the	target specified as the	last  argument
       to  YARA,  if  its  a path to a directory all the files contained in it
       will be scanned.

OPTIONS
       -d <identifier>=<value>
	      define external variable.

       -w  --no-warnings
	      Disable warnings.

	   --fail-on-warnings
	      Treat warnings as	errors.	Has no effect if used with  --no-warn-
	      ings.

       -v  --version
	      Show version information.

EXAMPLE
       The -d is used to define	external variables. For	example:

       -d flag=true

       -d beast=666

       -d name="James Bond"

SEE ALSO
       yara(1)

AUTHOR
       yarac  was  written  by	Victor	M. Alvarez <vmalvarez@virustotal.com>.
       This manual page	 was  written  by  Joao	 Eriberto  Mota	 Filho	<erib-
       erto@eriberto.pro.br>  for  the Debian project (but may be used by oth-
       ers).

YARAC 2.0			   Jan 2014			      YARAC(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=yarac&sektion=1&manpath=FreeBSD+Ports+15.0.quarterly>

home | help