x64dbg-plugin Yara (VS2022 c++\clr)
GUI (wait for design)
find within module:
yarascan module, ntdll.dll, crypto_signatures.yar
find within memory region:
yarascan range, 0, crypto_signatures.yar
find within memory length:
yarascan memory, 0x401000, 0x1000, crypto_signatures.yar
- from retdec yaracpp
- from fmt
- from glob
- from strutil
x64dbg-yaraScan is licensed under the WTFPL License. Dependencies are under their respective licenses.