Skip to content

v0.7.0

Compare
Choose a tag to compare
@github-actions github-actions released this 05 May 20:09
· 1 commit to fa2a7f4b5ff088108f353e89c81ff064d5148f0f since this release

This release adds the last missing modules from YARA: magic, dex and cuckoo.
It also fixes some bugs related to the use of global rules.

Added:

  • The magic module is now available behind the magic feature (not enabled by default). #139.
  • The dex module is now available behind the object feature (enabled by default). #141.
  • The cuckoo module is now available behind the cuckoo feature (not enabled by default). #143, #144.

Fixed:

  • Fix evaluation bug when global rules were declared after non-global rules. #146.
    If the global rules had any strings, it would make the evaluation of the rules that followed it invalid.
  • Fix application of global rules to namespaces. #147, #149.
    Global rules were applied to all namespaces instead of only their own namespaces.

Changed:

  • The type of boreal::module::StaticValue::Function and of the callback declared in the console module has changed from Arc<Box<...>> to Arc<...>. #142.
  • Error reporting has been improved on IO error on the rules file. #140.