Gentoo Packages

Search

Install

Install this package:

emerge -a app-forensics/yara

If the package is masked, you can unmask it using the autounmask tool or standard emerge options:

autounmask app-forensics/yara

Or alternatively:

emerge --autounmask-write -a app-forensics/yara

Package Information

Description:

YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns.

Homepage:

https://virustotal.github.io/yara/

License:

Apache-2.0

Versions

Metadata

Description

• YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns.

Maintainers

• Mario Haustein (mario.haustein@hrz.tu-chemnitz.de) - Type: person
• Sam James (sam@gentoo.org) - Type: person
• Proxy Maintainers (proxy-maint@gentoo.org) - Type: project

Upstream

• Remote IDs:
  • github: VirusTotal/yara

<pkgmetadata>
	<maintainer type="person" proxied="yes">
		<email>mario.haustein@hrz.tu-chemnitz.de</email>
		<name>Mario Haustein</name>
	</maintainer>
	<maintainer type="person">
		<email>sam@gentoo.org</email>
		<name>Sam James</name>
	</maintainer>
	<maintainer type="project" proxied="proxy">
		<email>proxy-maint@gentoo.org</email>
		<name>Proxy Maintainers</name>
	</maintainer>
	<longdescription>
		YARA is a tool aimed at (but not limited to) helping malware
		researchers to identify and classify malware samples. With YARA you can
		create descriptions of malware families (or whatever you want to
		describe) based on textual or binary patterns.
	</longdescription>
	<use>
		<flag name="cuckoo">Enable cockoo module</flag>
		<flag name="dex">Enable dex module</flag>
		<flag name="dotnet">Enable dotnet module</flag>
		<flag name="macho">Enable macho module</flag>
		<flag name="magic">Enable magic module</flag>
		<flag name="profiling">Enable rules profiling</flag>
		<flag name="python">Pulls in python binding via <pkg>dev-python/yara-python</pkg></flag>
	</use>
	<upstream>
		<remote-id type="github">VirusTotal/yara</remote-id>
	</upstream>
</pkgmetadata>

Lint Warnings

• [Warning] USE flag 'test' in ebuild 9999 is not documented in metadata.xml
• [Warning] USE flag 'test' in ebuild 4.5.5 is not documented in metadata.xml
• [Warning] USE flag 'test' in ebuild 4.5.4 is not documented in metadata.xml
• [Error] Missing md5-cache for ebuild yara-9999
• [Error] Missing md5-cache for ebuild yara-4.5.5
• [Error] Missing md5-cache for ebuild yara-4.5.4

USE Flags

Manage flags for this package: euse -i <flag> -p app-forensics/yara | euse -E <flag> -p app-forensics/yara | euse -D <flag> -p app-forensics/yara

Manifest