diff options
| author | xarkes | 2016-04-21 11:37:43 +0200 |
|---|---|---|
| committer | jvoisin | 2016-04-21 11:37:43 +0200 |
| commit | b2fc542557d08570faa0dd077d07277c626ddc1b (patch) | |
| tree | 5cc3fc94c16bc04c8127257f3109e41680af8b86 /README.md | |
| parent | d3008b7639c24cf71a2b07b29b58b48533fdfa49 (diff) | |
Renaming .yara files to .yar (#24)
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 8 |
1 files changed, 4 insertions, 4 deletions
| @@ -47,7 +47,7 @@ both) category, and should re-read the previous sentence. | |||
| 47 | ## How does it work? | 47 | ## How does it work? |
| 48 | 48 | ||
| 49 | Detection is performed by crawling the filesystem and testing files against a | 49 | Detection is performed by crawling the filesystem and testing files against a |
| 50 | [set]( https://github.com/nbs-system/php-malware-finder/blob/master/php.yara ) | 50 | [set]( https://github.com/nbs-system/php-malware-finder/blob/master/php.yar ) |
| 51 | of [YARA](https://plusvic.github.io/yara/) rules. Yes, it's that simple! | 51 | of [YARA](https://plusvic.github.io/yara/) rules. Yes, it's that simple! |
| 52 | 52 | ||
| 53 | 53 | ||
| @@ -67,8 +67,8 @@ Usage phpmalwarefinder [-cfhtv] [-l (php|asp)] <file|folder> ... | |||
| 67 | Or if you prefer to use `yara`: | 67 | Or if you prefer to use `yara`: |
| 68 | 68 | ||
| 69 | ``` | 69 | ``` |
| 70 | $ yara -r ./php.yara /var/www | 70 | $ yara -r ./php.yar /var/www |
| 71 | $ yara -r ./asp.yara /var/www | 71 | $ yara -r ./asp.yar /var/www |
| 72 | ``` | 72 | ``` |
| 73 | 73 | ||
| 74 | Please keep in mind that you should use at least YARA 3.4 because we're using | 74 | Please keep in mind that you should use at least YARA 3.4 because we're using |
| @@ -79,7 +79,7 @@ Ho, and by the way, you can run the comprehensive testsuite with `make test`. | |||
| 79 | 79 | ||
| 80 | ## Whitelisting | 80 | ## Whitelisting |
| 81 | 81 | ||
| 82 | Check the [whitelist.yara]( https://github.com/nbs-system/php-malware-finder/blob/master/whitelist.yara ) file. | 82 | Check the [whitelist.yar]( https://github.com/nbs-system/php-malware-finder/blob/master/whitelist.yar ) file. |
| 83 | If you're lazy, you can generate whitelists for entire folders with the | 83 | If you're lazy, you can generate whitelists for entire folders with the |
| 84 | [generate_whitelist.py]( https://github.com/nbs-system/php-malware-finder/blob/master/generate_whitelist.py ) script. | 84 | [generate_whitelist.py]( https://github.com/nbs-system/php-malware-finder/blob/master/generate_whitelist.py ) script. |
| 85 | 85 | ||
