Package: yara
What’s in yara-ctypes:A ctypes libyara wrapper module which exposes libyara’s exports into the
Python runtime (see:yara-project’s libyara v1.7).A thread safe Rules object with an interface that is compatible with the
interface exposed in the yara-project CPython extension module.namespace management to allow easy loading of multiple YARA rules into a
single Rules matching object.Various Scanner class types to enable thread or process pool execution
of matching requests over a Rules object.A feature rich command line interface that gives the user many options to
control how they may wish to perform a scan.Why:ctypes releases the GIL on system function calls…  Run your PC to its
true potential.It simplifies things a lot by keeping high order logic such as managing rules
paths, filtering paths, controlling pooled execution, etc. inside of a
language such as Python.No more building the PyC extension…I found a few bugs and memory leaks and wanted to make my life simple.As a reference and guide to yara-ctypes see:yara-ctypes documentationFor additional tips / tricks with this wrapper feel free to post a question at
the githubyara-ctypes/issuespage.Project hosting provided bygithub.com.[mjdorma+yara-ctypes@gmail.com]Install and runSimply run the following:> python setup.py install
> python setup.py test
> yara-ctypes -horPyPi:> pip install yara
> yara-ctypes -hNoteIf the package does not contain a pre-compiled libyara library for your
platform you will need to build and install it. Seenotes on building.Compatabilityyara-ctypesis implemented to be compatible with Python 2.6+ and Python 3.x.
It has been tested against the following Python implementations:Ubuntu 12.04:CPython 2.7 (32bit, 64bit)CPython 3.2 (32bit, 64bit)Ubuntu 11.10:CPython 2.6 (32bit)CPython 2.7 (32bit)CPython 3.2 (32bit)CPython 3.3 (32bit)Windows 7:CPython 2.6 (32bit, 64bit)CPython 3.2 (32bit, 64bit)OS X Mountain LionCPython 2.7 (64bit)Continuous integration testing is provided byTravis CI.IssuesSource code foryara-ctypesis hosted onGitHub.
Please filebug reportswith GitHub’s issues system.Change logversion 1.7.7 (27/05/2014)str conversion fix (contribution by David Cannings @olliencc)version 1.7.6 (26/10/2013)now using setuptools for distributionversion 1.7.5 (13/09/2013)added CLI status threadimproved process and thread completion codeversion 1.7.4 (12/09/2013)added yar preprocessorfixed asynchronous counter bugsolved the unyielded results issueversion 1.7.3 (28/04/2013)scan using a process pool or thread poolbug fixes and more testingversion 1.7.2 (19/04/2013)cli improvementsbug fixesversion 1.7.1 (17/04/2013)StdinScanneroverlap control for stream chunk enqueueingversion 1.7.0 (15/04/2013)ships with builds of libyara-1.7compatibility issues solves with yara-1.7’s interface changesmajor change up and improvement to the scan command line interface.a lot more testingversion 1.6.5 (12/04/2013)more tech in scanimproved testbug fixesversion 1.6.4 (11/04/2013)supports py3.3additional testimproved scan interfacebug fixesversion 1.6.3 (08/03/2013)bug fix to yara.py (callback callable check)version 1.6.2 (28/02/2013)support for OS X Mountain Lionversion 1.6.1 (06/09/2012)Support for 64bit WindowsBug fixesAdded documentationversion 1.6.0 (01/09/2012)Initial release