search

odin1314 / yara-project

Automatically exported from code.google.com/p/yara-project
Apache License 2.0
0 stars 0 forks source link

What is the difference of fast mode? #23

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Does fast mode ignore some scanning?

Original issue reported on code.google.com by whiled...@gmail.com on 16 Jun 2011 at 3:32

GoogleCodeExporter commented 9 years ago 
Fast mode stops searching for strings when they were already found. In fast 
mode you won't see all occurrences of the string in YARA's output when using 
-s, just the first one will appear. But it shouldn't change the verdict of the 
rule.

Please use our group (http://groups.google.com/group/yara-project/) for this 
kind of questions, or just drop me an email. ;-)

Original comment by plus...@gmail.com on 16 Jun 2011 at 10:01