VirusTotal / yara

The pattern matching swiss knife
https://virustotal.github.io/yara/
BSD 3-Clause "New" or "Revised" License
8.26k stars 1.44k forks source link

Rich version data #1883

Closed wxsBSD closed 1 year ago

wxsBSD commented 1 year ago

Add support for pulling out the just tool id and version fields into their own string. This is a more generic capability than hashing the entire rich header clear data because it is agnostic of the count fields.