search

openclarity / vmclarity

VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities
openclarity.io
Apache License 2.0
95 stars 22 forks source link

feat: enhance yara scanner #1774

Closed adamtagscherer closed 3 weeks ago

adamtagscherer commented 3 weeks ago

Description

This PR revamps the Yara malware scanner to run under a reasonable amount of time. The tests were run with an Ubuntu 24.04 image on AWS.

Scanning the whole mounted filesystem:

Yara config on the scanner VM: Screenshot 2024-06-13 at 11 32 15

Scan still in progress after 1 hour, not sure when it will finish:

Screenshot 2024-06-11 at 17 41 52

Scanning just specific files:

Malware config on scanner VM: Screenshot 2024-06-13 at 10 51 13

Malware finished in ~16mins:

Screenshot 2024-06-13 at 11 02 23

Type of Change

[ ] Bug Fix
[ ] New Feature
[ ] Breaking Change
[x] Refactor
[ ] Documentation
[ ] Other (please describe)

Checklist

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready:

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready:

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready:

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready:

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready:

github-actions[bot] commented 3 weeks ago

Hey!

Your images are ready: