VirusTotal / yara

The pattern matching swiss knife
https://virustotal.github.io/yara/
BSD 3-Clause "New" or "Revised" License
8.08k stars 1.43k forks source link

Parse dylib_commands and dylibs for mach-o #1975

Closed latonis closed 7 months ago

latonis commented 11 months ago

I plan on implementing some more mach-o parsing, but for now starting with dylibs and getting the information from them. 😸

Features implemented:

Tests implemented for multiple executables:

latonis commented 11 months ago

After speaking with @plusvic, will port this PR over to rust and continue new features for mach-o on yara-x.

@plusvic, should I close this PR or do we want to still have open for review and possible merge given its already been written? :smile_cat:

latonis commented 10 months ago

The rust equivalent of this was merged into yara-x with https://github.com/VirusTotal/yara-x/pull/43

latonis commented 7 months ago

Closing this as progress is much heavier on the YARA-X side for Mach-O 😸