spyre-project / spyre

simple YARA-based IOC scanner
GNU Lesser General Public License v3.0
164 stars 27 forks source link

More instructions about how to generate YARA and IOC.json? #60

Open 040840308 opened 3 years ago

040840308 commented 3 years ago

Hi, everyone

 I have successfully compiled Spyre. However, When I run it on windows10, some errors occured:
 1) stat ioc.json, the system cannot find the file specified.
 2)yara init stat filescan.yar the system cannot find the file specified
 3) yara init state procscan.yar the system cannot find the file specified

 I think this may be caused by failing compiled yara.go.

 Could someone give me some advice about this?
 Thanks
hillu commented 3 years ago

I am currently working on a substantial change to the configuration system which will involve YAML as a configuration format. Configuration examples will be a part of this change.

hillu commented 3 years ago

I have now pushed those changes. Does the example-spyre.yaml file contain what you need?

hillu commented 3 years ago

@040840308 ping?