Yara-Java

Protect your Fastify server against CSRF attacks with a series of utilities and recommendations for secure application development.

No need for Yara to be deployed as it embeds all necessary native dependencies. It supports two modes of operation: External, where the Yara binary is extracted and executed as a child process, and Embedded, where the Yara jnilib runs within the Java process. Rules can be loaded in various formats: as strings, files, or archives. When loading from archives, it will recursively search for and load all Yara rule files. Matches are returned along with their identifier, metadata, and tags. Additionally, it supports negation, timeout, and limit features. This version is compatible with Yara 4.0.2, dated 2021/1/17.

To get started, you need to obtain and build the Yara source code. **Example (building from version 4.0.2):** 1. Clone the Yara repository: ``` git clone https://github.com/virustotal/yara.git ``` 2. Change into the Yara directory: ``` cd yara ``` 3. Checkout the specific version tag: ``` git checkout tags/v4.0.2 ``` 4. Run the bootstrap script: ``` ./bootstrap.sh ``` 5. Configure the build with shared libraries and without crypto support: ``` ./configure --enable-shared --without-crypto CFLAGS=-fPIC ``` 6. Compile the code: ``` make ``` Next, you will need to obtain and build Yara-Java. **Example (while in the 'yara' folder):** 1. Clone the Yara-Java repository: ``` git clone https://github.com/p8a/yara-java.git ``` 2. Change into the Yara-Java directory: ``` cd yara-java ``` 3. Build the project using Maven: ``` mvn clean install ``` **Usage and Examples:** Refer to the unit tests for practical examples of how to use Yara. **Notes:** Once you have successfully added some sources, you can retrieve the compiled rules using the `yr_compiler_get_rules()` function. This function returns a pointer to a `YR_RULES` structure, which can be utilized to scan your data as outlined in the 'Scanning Data' section. Please note that after calling `yr_compiler_get_rules()`, you cannot add more sources.