|
@noob thanks for updating!!
(sorry for the offtopic)
@mrexodia, Yara is great!, it reminds in some way to SQL, very easy syntax, simple, but huuuuuge powerful
When i read it months ago i wonder why anyone has come with something like that in all these years of virus/malware/etc research
Talking about multistring wildcard searching, i guess this is how antivirus always worked? years ago read the clam antivirus source, but i can't remind right now.
I know they also search for hashes, and obviously, the inner workings are much much more complex, but never read too much about it
And old kaspersky source was leaked years ago...
|