search

CrowdStrike / xwf-yara-scanner

MIT License
84 stars 18 forks source link

The two input windows pop up multiple times #3

Closed forensenellanebbia closed 2 years ago

forensenellanebbia commented 2 years ago

I'm trying to use the X-Tension with XWF 20.5 SR-1 x64, but I get prompted multiple times to specify the location of the YARA rule file and the MB/size value. Apparently, the number of times is equal to the number of objects/partitions highlighted in the "Case data window" before running the X-Tension.

ctmayhew commented 2 years ago

Hi @forensenellanebbia - I noticed this too a while back. I think it's to do with the code being executed in the XT_Prepare() API call, whereas I should be placing this in the XT_Init() call. Let me see if I can test a fix for you.

ctmayhew commented 2 years ago

@forensenellanebbia - I've pushed version 1.1 which fixes this multiple user input issue. Hopefully that works for you. See https://github.com/CrowdStrike/xwf-yara-scanner/tree/main/Compiled%20X-Tensions

ctmayhew commented 2 years ago

Fixed in version 1.1

forensenellanebbia commented 2 years ago

Awesome, thanks! I tried it and worked perfectly.