Scan Modules about spyre

[hillu]

Sure. It looks like libyara is not able to parse your rule files. Can you provide the spyre.yaml and the YARA rule files you are using?

You may also be able to use the yara command line tool to get better diagnostics about the syntax errors in the rule files.

[MesserBart]

Hi, actually, I'm using the example-file spyre.yaml that was provided raw on the rep, I pasted it on the wanted _build, and I have really small clues on where to find/provide yara rules and files, and also where to actually put these files. It is actually my first time with yara modules.

[hillu]

Alright. I think we'll need to provide a self-contained example.

[MesserBart]

Thank you so much, would you mind upping this issue topic whenever an example is provided on the project source ?
A kind of "default version" would really help ! Thanks again for your dedication

[hillu]

I have just pushed a change that contains some example config + ruleset. Would this have helped you enough if it had been there when you found Spyre? If you feel that there's room for improvement in the example, feel free to open a PR.

('m aware that configuration for custom modules is still missing, I'll need to look around for some indicators that demonstrate general usefulness.)

[hillu]

@MesserBart ping?