[yara-python] How to get the rule name of every compiled rule?
Hi,
I'm currently loading quite a lot of files containing even more yara rules.
After loading the files, I'm compiling the rules so I can check files
against the rules. (see the code below)
print "[*] Loading rules (%s) ... " % (rules_dir)
sigs = dict([(name.replace(".yara", "").split("/")[-1], name) for name in
glob.glob(rules_dir + "/*.yara")])
rules = yara.compile(filepaths=sigs)
Before checking any file, I want to see the names of every rule I
successfully compiled.
I'd love to have something like:
for rule in rules.getNames():
print rule
# badAss-1-rule
# badAss-2-rule
# ...
# badAss-n-rule
Any ideas?
Thanks,
Rob
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Re: [yara-python] How to get the rule name of every compiled rule?
I believe there is support for this that was added a while back. Totally
untested but I believe it goes like this:
for rule in rules:
print rule.identifier
-- WXS
On Friday, March 4, 2016, Robert Giczewski
wrote:
> Hi,
> I'm currently loading quite a lot of files containing even more yara rules.
> After loading the files, I'm compiling the rules so I can check files
> against the rules. (see the code below)
>
> print "[*] Loading rules (%s) ... " % (rules_dir)
>
> sigs = dict([(name.replace(".yara", "").split("/")[-1], name) for name in
> glob.glob(rules_dir + "/*.yara")])
> rules = yara.compile(filepaths=sigs)
>
>
> Before checking any file, I want to see the names of every rule I
> successfully compiled.
> I'd love to have something like:
>
>
> for rule in rules.getNames():
> print rule
>
> # badAss-1-rule
> # badAss-2-rule
> # ...
> # badAss-n-rule
>
> Any ideas?
>
> Thanks,
>
> Rob
>
> --
> You received this message because you are subscribed to the Google Groups
> "YARA" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to yara-project+unsubscr...@googlegroups.com
>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Re: [yara-python] How to get the rule name of every compiled rule?
That would be too easy ;-)
TypeError: 'yara.Rules' object is not iterable
Am Freitag, 4. März 2016 13:59:11 UTC+1 schrieb Wesley Shields:
>
> I believe there is support for this that was added a while back. Totally
> untested but I believe it goes like this:
>
> for rule in rules:
> print rule.identifier
>
> -- WXS
>
> On Friday, March 4, 2016, Robert Giczewski > wrote:
>
>> Hi,
>> I'm currently loading quite a lot of files containing even more yara
>> rules.
>> After loading the files, I'm compiling the rules so I can check files
>> against the rules. (see the code below)
>>
>> print "[*] Loading rules (%s) ... " % (rules_dir)
>>
>> sigs = dict([(name.replace(".yara", "").split("/")[-1], name) for name in
>> glob.glob(rules_dir + "/*.yara")])
>> rules = yara.compile(filepaths=sigs)
>>
>>
>> Before checking any file, I want to see the names of every rule I
>> successfully compiled.
>> I'd love to have something like:
>>
>>
>> for rule in rules.getNames():
>> print rule
>>
>> # badAss-1-rule
>> # badAss-2-rule
>> # ...
>> # badAss-n-rule
>>
>> Any ideas?
>>
>> Thanks,
>>
>> Rob
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "YARA" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to yara-project+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Re: [yara-python] How to get the rule name of every compiled rule?
What version of YARA are you using? That should work but I'm unable to
confirm right now.
-- WXS
On Friday, March 4, 2016, Robert Giczewski
wrote:
> That would be too easy ;-)
>
> TypeError: 'yara.Rules' object is not iterable
>
>
> Am Freitag, 4. März 2016 13:59:11 UTC+1 schrieb Wesley Shields:
>>
>> I believe there is support for this that was added a while back. Totally
>> untested but I believe it goes like this:
>>
>> for rule in rules:
>> print rule.identifier
>>
>> -- WXS
>>
>> On Friday, March 4, 2016, Robert Giczewski wrote:
>>
>>> Hi,
>>> I'm currently loading quite a lot of files containing even more yara
>>> rules.
>>> After loading the files, I'm compiling the rules so I can check files
>>> against the rules. (see the code below)
>>>
>>> print "[*] Loading rules (%s) ... " % (rules_dir)
>>>
>>> sigs = dict([(name.replace(".yara", "").split("/")[-1], name) for name
>>> in glob.glob(rules_dir + "/*.yara")])
>>> rules = yara.compile(filepaths=sigs)
>>>
>>>
>>> Before checking any file, I want to see the names of every rule I
>>> successfully compiled.
>>> I'd love to have something like:
>>>
>>>
>>> for rule in rules.getNames():
>>> print rule
>>>
>>> # badAss-1-rule
>>> # badAss-2-rule
>>> # ...
>>> # badAss-n-rule
>>>
>>> Any ideas?
>>>
>>> Thanks,
>>>
>>> Rob
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "YARA" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to yara-project+unsubscr...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>> --
> You received this message because you are subscribed to the Google Groups
> "YARA" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to yara-project+unsubscr...@googlegroups.com
>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Re: [yara-python] How to get the rule name of every compiled rule?
yara 3.2.0
yara-python 2.0
Am Freitag, 4. März 2016 14:35:21 UTC+1 schrieb Wesley Shields:
>
> What version of YARA are you using? That should work but I'm unable to
> confirm right now.
>
> -- WXS
>
> On Friday, March 4, 2016, Robert Giczewski > wrote:
>
>> That would be too easy ;-)
>>
>> TypeError: 'yara.Rules' object is not iterable
>>
>>
>> Am Freitag, 4. März 2016 13:59:11 UTC+1 schrieb Wesley Shields:
>>>
>>> I believe there is support for this that was added a while back. Totally
>>> untested but I believe it goes like this:
>>>
>>> for rule in rules:
>>> print rule.identifier
>>>
>>> -- WXS
>>>
>>> On Friday, March 4, 2016, Robert Giczewski
>>> wrote:
>>>
Hi,
I'm currently loading quite a lot of files containing even more yara
rules.
After loading the files, I'm compiling the rules so I can check files
against the rules. (see the code below)
print "[*] Loading rules (%s) ... " % (rules_dir)
sigs = dict([(name.replace(".yara", "").split("/")[-1], name) for name
in glob.glob(rules_dir + "/*.yara")])
rules = yara.compile(filepaths=sigs)
Before checking any file, I want to see the names of every rule I
successfully compiled.
I'd love to have something like:
for rule in rules.getNames():
print rule
# badAss-1-rule
# badAss-2-rule
# ...
# badAss-n-rule
Any ideas?
Thanks,
Rob
--
You received this message because you are subscribed to the Google
Groups "YARA" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
>>> --
>> You received this message because you are subscribed to the Google Groups
>> "YARA" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to yara-project+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Re: [yara-python] How to get the rule name of every compiled rule?
I don't recall exactly when it was added but probably is in newer versions
than what you have.
-- WXS
On Friday, March 4, 2016, Robert Giczewski
wrote:
> yara 3.2.0
> yara-python 2.0
>
> Am Freitag, 4. März 2016 14:35:21 UTC+1 schrieb Wesley Shields:
>>
>> What version of YARA are you using? That should work but I'm unable to
>> confirm right now.
>>
>> -- WXS
>>
>> On Friday, March 4, 2016, Robert Giczewski wrote:
>>
>>> That would be too easy ;-)
>>>
>>> TypeError: 'yara.Rules' object is not iterable
>>>
>>>
>>> Am Freitag, 4. März 2016 13:59:11 UTC+1 schrieb Wesley Shields:
I believe there is support for this that was added a while back.
Totally untested but I believe it goes like this:
for rule in rules:
print rule.identifier
-- WXS
On Friday, March 4, 2016, Robert Giczewski
wrote:
> Hi,
> I'm currently loading quite a lot of files containing even more yara
> rules.
> After loading the files, I'm compiling the rules so I can check files
> against the rules. (see the code below)
>
> print "[*] Loading rules (%s) ... " % (rules_dir)
>
> sigs = dict([(name.replace(".yara", "").split("/")[-1], name) for name
> in glob.glob(rules_dir + "/*.yara")])
> rules = yara.compile(filepaths=sigs)
>
>
> Before checking any file, I want to see the names of every rule I
> successfully compiled.
> I'd love to have something like:
>
>
> for rule in rules.getNames():
> print rule
>
> # badAss-1-rule
> # badAss-2-rule
> # ...
> # badAss-n-rule
>
> Any ideas?
>
> Thanks,
>
> Rob
>
> --
> You received this message because you are subscribed to the Google
> Groups "YARA" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to yara-project+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>
--
>>> You received this message because you are subscribed to the Google
>>> Groups "YARA" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to yara-project+unsubscr...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>> --
> You received this message because you are subscribed to the Google Groups
> "YARA" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to yara-project+unsubscr...@googlegroups.com
>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Re: [yara-python] How to get the rule name of every compiled rule?
yara-python 2.0 don't have the iterator for yara.Rules implemented. You can
upgrade to more recent version.
On Fri, Mar 4, 2016 at 2:50 PM, Wesley Shields wrote:
> I don't recall exactly when it was added but probably is in newer versions
> than what you have.
>
> -- WXS
>
> On Friday, March 4, 2016, Robert Giczewski
> wrote:
>
>> yara 3.2.0
>> yara-python 2.0
>>
>> Am Freitag, 4. März 2016 14:35:21 UTC+1 schrieb Wesley Shields:
>>>
>>> What version of YARA are you using? That should work but I'm unable to
>>> confirm right now.
>>>
>>> -- WXS
>>>
>>> On Friday, March 4, 2016, Robert Giczewski
>>> wrote:
>>>
That would be too easy ;-)
TypeError: 'yara.Rules' object is not iterable
Am Freitag, 4. März 2016 13:59:11 UTC+1 schrieb Wesley Shields:
>
> I believe there is support for this that was added a while back.
> Totally untested but I believe it goes like this:
>
> for rule in rules:
> print rule.identifier
>
> -- WXS
>
> On Friday, March 4, 2016, Robert Giczewski
> wrote:
>
>> Hi,
>> I'm currently loading quite a lot of files containing even more yara
>> rules.
>> After loading the files, I'm compiling the rules so I can check files
>> against the rules. (see the code below)
>>
>> print "[*] Loading rules (%s) ... " % (rules_dir)
>>
>> sigs = dict([(name.replace(".yara", "").split("/")[-1], name) for
>> name in glob.glob(rules_dir + "/*.yara")])
>> rules = yara.compile(filepaths=sigs)
>>
>>
>> Before checking any file, I want to see the names of every rule I
>> successfully compiled.
>> I'd love to have something like:
>>
>>
>> for rule in rules.getNames():
>> print rule
>>
>> # badAss-1-rule
>> # badAss-2-rule
>> # ...
>> # badAss-n-rule
>>
>> Any ideas?
>>
>> Thanks,
>>
>> Rob
>>
>> --
>> You received this message because you are subscribed to the Google
>> Groups "YARA" group.
>> To unsubscribe from this group and stop receiving emails from it,
>> send an email to yara-project+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
> --
You received this message because you are subscribed to the Google
Groups "YARA" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
>>> --
>> You received this message because you are subscribed to the Google Groups
>> "YARA" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to yara-project+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
> --
> You received this message because you are subscribed to the Google Groups
> "YARA" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to yara-project+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to yara-project+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
