Yara-x: Implement bitwise masking in hex patterns

hackathon@FIRSTCON25
1

I’m working on extending the yara-x parsing to support binary patterns.
Original GitHub issue here: Implement bitwise masking in hex patterns. · Issue #15 · VirusTotal/yara-x · GitHub

WIP branch here: GitHub - dengelt/yara-x at bit-pattern

Parsing is done wrt whole binary bytes, nibbles could be added later.
Still needs to be documented.

2 Likes
2

That’s pretty cool. I’m sure @qjerome would be interested into it too.