Open xorhex opened 4 months ago
Hi @xorhex, glad you like YLS :)
Indeed this is more of a request for avast/yaramod.
The support for new YARA version is definitely planned, but currently we did not have much bandwidth to finish that yet.
Looking at the current state, we are even lacking support for v4.3.0 :/ hopefully we will be able to address that in the near future.
First, a big THANK YOU to the folks at AVAST for releasing and maintaining this plugin. :muscle:
I found myself making use of the
pe.import_rva
function and discovered thatUnrecognized identifier 'import_rva' referenced (Yaramod)
was shown. Guessing this is probably an issue with Yaramod but was curious to know if updated YARA support is planned to add these newer YARA features?Checked my install and it reads
yls-1.4.1 yls-yara-1.4.1
.Thanks!