hillu / go-yara

Go bindings for YARA
BSD 2-Clause "Simplified" License
350 stars 112 forks source link

Is there a code sample or a tutorial for beginners somewhere? #105

Closed ghost closed 1 year ago

ghost commented 2 years ago

I can't simply use go-yara like I can with yara-python,Is there a code sample or a tutorial for beginners somewhere?

hillu commented 2 years ago

Sure. Please have a look at the _examples/simple-yara directory.

Is there anything else you need to get started … or do you have suggestions on how to improve the documentation?

ghost commented 2 years ago

Even I appreciate It's not particularly easy to use than yara-python

Sure. Please have a look at the _examples/simple-yara directory.

Is there anything else you need to get started … or do you have suggestions on how to improve the documentation?

So much appreciate for your reply, I'm sorry to say, go-yara is not particularlly easy to use than yara-python.....,You'd better to optimize the API.

I sincerely hope that go-yara can grow and grow

hillu commented 2 years ago

At the moment, I don't think that there is anything to be done to improve the API. Since Go is a language based on weak static types, the experience is going to be a bit different from what you get with Python. (I had a brief look at Go 1.18+ "generics", but there wasn't anything that could have been improved by usinig generiics.)

So, if there's anything that can be improved regarding examples or other documentation, please tell me.

aosti commented 1 year ago

I have to respectfully disagree with @b1tkeeper.

We successfully used go-yara and a set of yara rules in one of our internal security services. It is stable and performs great. We scan more than 3 million files daily.

hillu commented 1 year ago

@aosti Thank you for your feedback. :-)

@b1tkeeper: Unless you have any specific suggestions on what to improve (preferably in the form of pull requests for documentation), I'm going to close this issue.

hillu commented 1 year ago

Since there are no specific suggestions on what to improve, I'm closing this issue.