Files
yara/tests
Marc-Etienne M.Léveillé e68eff9868 PE rich signature improvements (#1135)
* rich_internal function now returns the sum of counts
of the matching rich entries instead of a boolean

It remains backwards compatible thanks to non-null values being
considered as true and when not found it returns 0 (false).

* Update documentation of the `toolid` and `version` in PE module
to reflect changes of behavior: it now returns the sum of counts matching
to given `toolid` and `version`.

* Added test for the updated rich_signature function
2019-09-23 12:49:22 +02:00
..
2019-09-03 10:59:47 +02:00
2019-01-15 17:39:46 +01:00
2019-08-05 08:38:57 +02:00
2019-08-12 09:07:58 +02:00
2019-09-18 17:12:46 +02:00
2019-09-18 17:12:46 +02:00