4

Docs: bring the YARA wiki page up to date by mike-myers-tob · Pull Request #7172...

 2 years ago
source link: https://github.com/osquery/osquery/pull/7172
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Copy link

Member

mike-myers-tob commented on Jun 23, 2021 •

edited

Resolves #7110

  • Removes outdated column pattern and explains the WHERE path LIKE syntax with examples
  • Documents new flags and functionality added in the last year or so
  • Clarifies some of the usage, and forms an initial version of a troubleshooting section
  • Points to YARA rule-writing documentation
  • Updates the examples with the current table schema
  • I've tested all the examples myself (on Windows 10)

report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK