[Forensics-changes] [yara] 94/135: Document the command-line -x option in the man page and add example to documentation

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:27:36 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.1.0
in repository yara.

commit 542c955b20358a6e26092dd22ec57fa224ea413f
Author: Victor M. Alvarez <plusvic at gmail.com>
Date:   Wed Aug 13 13:42:16 2014 +0200

    Document the command-line -x option in the man page and add example to documentation
---
 docs/commandline.rst |  4 +++-
 yara.man             | 16 ++++++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/docs/commandline.rst b/docs/commandline.rst
index bf44c39..e2c2b11 100644
--- a/docs/commandline.rst
+++ b/docs/commandline.rst
@@ -106,6 +106,8 @@ Here you have some examples:
 
     yara -d mybool=true -d myint=5 -d mystring="my string" /foo/bar/rules bazfile
 
+* Apply rules on */foo/bar/rules* to *bazfile* while passing the content of
+  *cuckoo_json_report* to the cuckoo module::
 
-
+    yara -x cuckoo=cuckoo_json_report /foo/bar/rules bazfile
 
diff --git a/yara.man b/yara.man
index 30e27a6..7c0a9f4 100644
--- a/yara.man
+++ b/yara.man
@@ -58,6 +58,10 @@ has elapsed.
 .BI \-d " identifier"=value
 Define an external variable. This option can be used multiple times.
 .TP
+.BI \-x " module"=file
+Pass file's content as extra data to module. This option can be used multiple
+times.
+.TP
 .B \-r
 Scan files in directories recursively.
 .TP
@@ -110,6 +114,18 @@ Defines three external variables
 and
 .I mystring.
 .RE
+.PP
+$ yara -x cuckoo=cuckoo_json_report /foo/bar/rules bazfile
+.RS
+.PP
+Apply rules on
+.I /foo/bar/rules
+to
+.I bazfile
+while passing the content of
+.I cuckoo_json_report
+to the cuckoo module.
+.RE
 
 .SH AUTHOR
 Victor M. Alvarez <plusvic at gmail.com>;<vmalvarez at virustotal.com>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list