ev-flow / ev-flow/quark-engine

Quark rule redesign in YARA format

Open
#313 3 comments 3 reactions 0 assignees View on GitHub
issue-processing-state-04
Dominant language
Python
Stars
1.7k
Forks
218
Avg merge
4d 12h
Merged PRs (30d)
7

Description

Since [YARA](https://yara.readthedocs.io/en/v4.1.0/index.html) is one of the well-known and the most used for malware detection. I suggest to redesign Quark rule in YARA format, making Quark a YARA compatible engine.

This feature makes Quark rule easier to write and better integration with other tools.

@pulorsok, @haeter525 what do you guys think?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.