search

100DaysofYARA / 2023

Rules Shared by the Community from 100 Days of YARA 2023
77 stars 26 forks source link

idea: integrate yara-ci #13

Open ruppde opened 1 year ago

ruppde commented 1 year ago

YARA-CI helps you to keep your YARA rules in good shape. It can be integrated into any GitHub repository containing YARA rules, and it will run automated tests every time you make some change. The automated tests include:

Rules validation Detection of false positives Detection of false negatives

https://yara-ci.cloud.virustotal.com/

ruppde commented 1 year ago

would show errors immediatel, e.g.: grafik

g-les commented 1 year ago

Like the idea @ruppde - I was thinking of using that or this tool: https://github.com/CybercentreCanada/CCCS-Yara

I've no idea how to integrate them into this repo, I'll read up on it this week!

ruppde commented 1 year ago

CCCS-Yara looks like it's only possible to run it locally. yara-ci is configured in 2 minutes to check all rules in a repo: https://yara-ci.cloud.virustotal.com/installation/installation/

they check different aspects so the perfect solution would be to use both.

there's also https://github.com/Neo23x0/yaraQA