Skip to content

Reimplementation of the "file" command with yara rules for further analysis on scans

License

Notifications You must be signed in to change notification settings

wellatleastitried/yfile

Repository files navigation

yfile

Reimplementation of the "file" command with yara rules to scan for common malware signatures and other patterns.

Requirements

Development

Packages

  • just
  • yara
  • libyara-dev
  • gcc / clang (Any C compiler)

Go Tools

These can be installed by running just dev-setup once the project has been cloned.

  • golangci-lint
  • editorconfig-checker

Installation

Releases

The Binary can be downloaded from the releases page OR by running:

go install github.com/wellatleastitried/yfile/cmd/yfile@latest

Manual

  1. Clone the repository with submodules:
git clone --recurse-submodules https://github.com/wellatleastitried/yfile.git
  1. Run just
just build
  1. The binary can be ran from:
./build/yfile

or installed to /usr/local/bin with:

sudo just install

Usage

User guide can be found here.

Contributing

Contributions are welcome! Please see the contributing guide for more information.

License

This project is licensed under the Apache License. See the LICENSE file for details.