Sunday, 15 January 2012

malware detection - How to group yara's results by file? -


I'm trying to detect some malware by using yara

< P> The problem is that I would like to group the results by file

The content command line that is using is:

  $ yara -r rules.yar Malware_folder  

Here's the answer because I've found something where

< Blockquote>

$ $ i in $ (search e / -type f); Docho -n "$ i,"; IFS = $ "\ n" YES RULES. Alright "$ i" | Cut-D '' -f1 | Tr -t \ n,; Echo; Done> results.csv


No comments:

Post a Comment