jbremer / cuckoo

59%

master: 62%

LAST BUILD ON BRANCH yaraload

branch: yaraload

CHANGE BRANCH

x

Reset

• yaraload
• 2.0.0
• 2.0.1a1
• 2.0.5.2
• 206
• 2061
• 2062
• 64bit0
• actual-tesseract-fix
• analyzer-unittest
• anonymous-reprocess
• api-unic
• cfg1
• cleanup-webif
• compat1
• config-caching
• core-aborted
• core-submit
• critical-timeout
• cwd-migr
• cwddel
• dashb1
• dashboard
• data-init-file
• data-init-file2
• dde1
• dde2
• dist0
• dist1
• dist2
• dumpmem0
• dumpmem1
• eggh021
• elastic-mongo-abstract
• empty-reprocess
• ensure-archives
• esmerge
• expose0
• extend-task
• extr-wheel
• extracted
• extracted3
• feedback
• finalize-database-migration
• finalize-import
• fix-screenshots
• fixup-fileupload
• fixup-machine-app
• fixup-rooter
• global-db-instance
• high0
• ifconfig
• inetsim2
• init-binaries
• json-speedup
• kernel
• kernel2
• large-file-support
• lib-issue
• linux-analysis
• linux2
• lnk-support
• load-signatures
• logging-tweak
• macosx0
• macosx1
• macosx2
• macosx3
• macro
• magic
• magic0
• magic1
• magic64
• mainexc
• master
• merge-http
• merge-pcap
• misc-changes
• mongo-abstract
• mongo-connect
• mongo-testing
• monitor-fixes
• newdocs2
• no-tesseract-warning
• none-filetype
• obsolete-dirs
• package
• pcap1
• pcapwebif
• pdf-report
• pdf-update
• pdf0
• performance
• pidfile
• pipinst
• postsubmit-page
• ppid0
• pr-merge1
• preinstall
• procmem
• ps1trail
• rarfile
• rdp
• rdp-merge0
• recentfiles
• recentfiles2
• recentfiles3
• reinstall
• relative-webif
• releases
• rename
• replay
• replay1
• requests2.13
• reworkscheduler
• rooter1
• scheduler
• sdist
• setup.py-exceptions
• sflock-api
• sflock-upd
• simplify-packages
• startup-tweaks
• stricter-packages
• stuff1
• submit-urls
• test0
• things
• travis-macosx
• tweaks1
• uni0
• uni1
• unicode-filenames
• unicode-support
• unicwd
• unilog
• upd-deps
• upd-setuptools
• ux-fixes
• ux-merges
• view-tasks
• virtualbox-tweakings
• virtualbox-tweaks
• vm1
• vmrouting-tweak1
• volatility
• volatility-coverage
• vpn-routing
• wip-jbr
• yara-offsets
• yara360
• yara361
• yara362
• yaramatchstrings

Build # 636

Build Type

push

travis-ci

Committed by jbremer

Commit Message

recursively walk and load yara rules on startup

Rather than creating the index_*.yar files during "cuckoo -d" and then
loading those when running "cuckoo process", we'll from now on always
enumerate the available Yara rules recursively and load 'em on-the-go.

This simplifies life when updating Yara rules and re-running "cuckoo
process -r". Furthermore this commit adds recursive walking support as
well as following symbolic links.

Currently there's a limitation in the usage of Yara rules, though, as at
the moment it isn't possible to use "include" statements in the rules
(with relative paths, anyway). We may be able to fix that by temporarily
os.chdir()'ing into the yara/category/ directory.

This commit resolves #773 and provides a stepping stone for #776 & #512.

Run Details

8246 of 14059 relevant lines covered (58.65%)

1.15 hits per line