Encrypted rules?

[RRancio]

hey its me again :V, does Go-Yara support the encripted rules using Yarac.exe encryption?

[hillu]

There is no encryption going on, the ruleset is just compiled.

Yes, go-yara supports loading compiled rulesets, see the LoadRules and ReadRules functions.

[RRancio]

i mean, if i request the compiled rule from a website or a host already compiled, can i use it anyways? (use the rule to scan), because it only says filename, not anything related to compiled url

[RRancio]

figured sir, sorry

[hillu]

A practical problem with passing around commpiled rulesets is that they are tied to the specific YARA version they were created with.