VirusTotal/yara
1
0
Fork 0
mirror of https://github.com/VirusTotal/yara.git synced 2026-10-12 02:10:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Lots of changes for version 1.1

Browse Source
This commit is contained in:
Victor M. Alvarez
2008-12-23 11:54:43 +00:00
parent ab87d5f0ca
commit 8626fc113a
31 changed files with 1619 additions and 1153 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extra/TextMate-bundle.zip
BIN
View File
Binary file not shown.
extra/YARA.tmbundle/Preferences/Typing Pairs.tmPreferences
-35
View File
@@ -1,35 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>name</key>
<string>Typing Pairs</string>
<key>settings</key>
<dict>
<key>highlightPairs</key>
<array>
<array>
<string>"</string>
<string>"</string>
</array>
<array>
<string>{</string>
<string>}</string>
</array>
</array>
<key>smartTypingPairs</key>
<array>
<array>
<string>"</string>
<string>"</string>
</array>
<array>
<string>{</string>
<string>}</string>
</array>
</array>
</dict>
<key>uuid</key>
<string>A9DBD3EB-C900-46BD-BFC6-1B663B04D53F</string>
</dict>
</plist>
extra/YARA.tmbundle/Snippets/rule.tmSnippet
-21
View File
@@ -1,21 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>content</key>
<string>rule ${1:identifier}
{
strings:
$3
condition:
$0
}</string>
<key>name</key>
<string>rule</string>
<key>tabTrigger</key>
<string>rule</string>
<key>uuid</key>
<string>37D903E5-F98B-48C3-AED3-A79518607E49</string>
</dict>
</plist>
extra/YARA.tmbundle/Syntaxes/MDL.tmLanguage
-132
View File
@@ -1,132 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>fileTypes</key>
<array/>
<key>foldingStartMarker</key>
<string>/\*\*|\{\s*$</string>
<key>foldingStopMarker</key>
<string>\*\*/|^\s*\}</string>
<key>name</key>
<string>YARA</string>
<key>patterns</key>
<array>
<dict>
<key>begin</key>
<string>/\*</string>
<key>captures</key>
<dict>
<key>0</key>
<dict>
<key>name</key>
<string>punctuation.definition.comment.yara</string>
</dict>
</dict>
<key>end</key>
<string>\*/</string>
<key>name</key>
<string>comment.block.yara</string>
</dict>
<dict>
<key>begin</key>
<string>//</string>
<key>beginCaptures</key>
<dict>
<key>0</key>
<dict>
<key>name</key>
<string>punctuation.definition.comment.yara</string>
</dict>
</dict>
<key>end</key>
<string>$\n?</string>
<key>name</key>
<string>comment.line.yara</string>
<key>patterns</key>
<array>
<dict>
<key>match</key>
<string>(?&gt;\\\s*\n)</string>
<key>name</key>
<string>punctuation.separator.continuation.yara</string>
</dict>
</array>
</dict>
<dict>
<key>match</key>
<string>\b(true|false|private|rule|strings|condition|and|or|not|filesize|in|at|rva|of|nocase|regexp|fullword|widechar|entrypoint)\b</string>
<key>name</key>
<string>keyword.yara</string>
</dict>
<dict>
<key>match</key>
<string>\b(0(x|X)[0-9a-fA-F]+)(MB|KB)?\b</string>
<key>name</key>
<string>constant.numeric.yara</string>
</dict>
<dict>
<key>match</key>
<string>(\$|#)[a-zA-Z0-9_]+\b</string>
<key>name</key>
<string>variable.other.yara</string>
</dict>
<dict>
<key>begin</key>
<string>"</string>
<key>beginCaptures</key>
<dict>
<key>0</key>
<dict>
<key>name</key>
<string>punctuation.definition.string.begin.yara</string>
</dict>
</dict>
<key>end</key>
<string>"</string>
<key>endCaptures</key>
<dict>
<key>0</key>
<dict>
<key>name</key>
<string>punctuation.definition.string.end.yara</string>
</dict>
</dict>
<key>name</key>
<string>string.quoted.double.yara</string>
<key>patterns</key>
<array>
<dict>
<key>include</key>
<string>#string_escaped_char</string>
</dict>
</array>
</dict>
</array>
<key>repository</key>
<dict>
<key>string_escaped_char</key>
<dict>
<key>patterns</key>
<array>
<dict>
<key>match</key>
<string>\\(\\|[t"]|[4-7]\d?|x[a-fA-F0-9]{,2})</string>
<key>name</key>
<string>constant.character.escape.yara</string>
</dict>
<dict>
<key>match</key>
<string>\\.</string>
<key>name</key>
<string>invalid.illegal.unknown-escape.yara</string>
</dict>
</array>
</dict>
</dict>
<key>scopeName</key>
<string>source.yara</string>
<key>uuid</key>
<string>B2FCEE68-87FA-45BA-BCAB-72EB9C9A0C3F</string>
</dict>
</plist>
extra/YARA.tmbundle/info.plist
-16
View File
@@ -1,16 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>name</key>
<string>YARA</string>
<key>ordering</key>
<array>
<string>B2FCEE68-87FA-45BA-BCAB-72EB9C9A0C3F</string>
<string>A9DBD3EB-C900-46BD-BFC6-1B663B04D53F</string>
<string>37D903E5-F98B-48C3-AED3-A79518607E49</string>
</array>
<key>uuid</key>
<string>1E30D5ED-9687-4F4E-8755-1B8D7403F549</string>
</dict>
</plist>