YARA-X’s 1.21.0 release brings 5 improvements and 4 bugfixes.
One improvement is allowing stdin for CLI option –scan-list.
This allows one to generate a list of folders to scan, and pass it via a pipe. Like this example (Windows) to scan all folders with “sample” in their name:
dir /s /b /a:d c:*samples* | yr.exe scan --scan-list - rules.yara
Didier Stevens
Senior handler
blog.DidierStevens.com
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.