From 81edf42d945344a644e3a801da08ac464359c9a4 Mon Sep 17 00:00:00 2001 From: Marko Ratkaj Date: Tue, 18 Apr 2017 15:35:29 +0200 Subject: yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj --- utils/yara/Config.in | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 utils/yara/Config.in (limited to 'utils/yara/Config.in') diff --git a/utils/yara/Config.in b/utils/yara/Config.in new file mode 100644 index 000000000..76e83db6b --- /dev/null +++ b/utils/yara/Config.in @@ -0,0 +1,16 @@ +if PACKAGE_yara + comment "Optional modules" + + config YARA_module_magic + bool "Magic module" + default y + help + Identify the type of the file based on the output of file command + + config YARA_module_cuckoo + bool "Cuckoo module" + default n + help + Create rules based on behavioral info generated by a Cuckoo sandbox +endif + -- cgit v1.2.3