summaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authorxarkes2016-04-21 11:37:43 +0200
committerjvoisin2016-04-21 11:37:43 +0200
commitb2fc542557d08570faa0dd077d07277c626ddc1b (patch)
tree5cc3fc94c16bc04c8127257f3109e41680af8b86 /README.md
parentd3008b7639c24cf71a2b07b29b58b48533fdfa49 (diff)
Renaming .yara files to .yar (#24)
Diffstat (limited to 'README.md')
-rw-r--r--README.md8
1 files changed, 4 insertions, 4 deletions
diff --git a/README.md b/README.md
index 7ed97d3..0cb901a 100644
--- a/README.md
+++ b/README.md
@@ -47,7 +47,7 @@ both) category, and should re-read the previous sentence.
47## How does it work? 47## How does it work?
48 48
49Detection is performed by crawling the filesystem and testing files against a 49Detection is performed by crawling the filesystem and testing files against a
50[set]( https://github.com/nbs-system/php-malware-finder/blob/master/php.yara ) 50[set]( https://github.com/nbs-system/php-malware-finder/blob/master/php.yar )
51of [YARA](https://plusvic.github.io/yara/) rules. Yes, it's that simple! 51of [YARA](https://plusvic.github.io/yara/) rules. Yes, it's that simple!
52 52
53 53
@@ -67,8 +67,8 @@ Usage phpmalwarefinder [-cfhtv] [-l (php|asp)] <file|folder> ...
67Or if you prefer to use `yara`: 67Or if you prefer to use `yara`:
68 68
69``` 69```
70$ yara -r ./php.yara /var/www 70$ yara -r ./php.yar /var/www
71$ yara -r ./asp.yara /var/www 71$ yara -r ./asp.yar /var/www
72``` 72```
73 73
74Please keep in mind that you should use at least YARA 3.4 because we're using 74Please keep in mind that you should use at least YARA 3.4 because we're using
@@ -79,7 +79,7 @@ Ho, and by the way, you can run the comprehensive testsuite with `make test`.
79 79
80## Whitelisting 80## Whitelisting
81 81
82Check the [whitelist.yara]( https://github.com/nbs-system/php-malware-finder/blob/master/whitelist.yara ) file. 82Check the [whitelist.yar]( https://github.com/nbs-system/php-malware-finder/blob/master/whitelist.yar ) file.
83If you're lazy, you can generate whitelists for entire folders with the 83If you're lazy, you can generate whitelists for entire folders with the
84[generate_whitelist.py]( https://github.com/nbs-system/php-malware-finder/blob/master/generate_whitelist.py ) script. 84[generate_whitelist.py]( https://github.com/nbs-system/php-malware-finder/blob/master/generate_whitelist.py ) script.
85 85