Add yara language support to org-babel
in Org-mode
.
Here is an example in an org file:
rule Hello {
strings:
$a = "hello"
condition:
$a and filesize > 10
}
Move the cursor to above code block, then tap ‘ctrl+c, ctrl+c’ to eval the code block. That actually equals to run the following shell command:
yara $rulefile /bin/curl -d=filesize=10 -s
, where $rulefile is a file containing the code block mentioned above.