- Fix help message
- Use all files in a directory specified by
--rule-dir
instead of just those with the extension.yara
- Fix bug where
--rule-dir
is prefixed by./
- Bump
yara-python
to 4.3.0+ and deal with backwards incompatibility
- Lock
yara-python
at 4.2.3 bc 4.3.x causes problems
- Fix PyPi screenshots
- Raise better error message if yara rules file doesn't exist
- Fix PyPi screenshots
- All command lines args configurable via environment variables or
.yaralyzer
file - Improve decoding attempt statistics tracking
- Add suppression notices
- Expose
--min-chardet-table-confidence
option
- Add
--log-level
option BytesMatch.is_decodable()
method
- Bump deps
- Show hex and ascii side by side in decodes table
- Remove
cairosvg
dependency
- Use
rich_argparse_plus
for help formatting
- Add
--max-match-length
and--yara-stack-size
args - Increase max returned bytes (was stuck at 512)
- Tweak unprintable char format for ASCII C1 control range, minor style changes
- Show color key for raw YARA match panel
- Properly escape bytes previews for rich
- Add Pdfalyzer info message when scanning PDFs
- Show MD5, SHA1, and SHA256 hashes for each match
- Add
--hex-pattern
command line option - Add
--patterns-label
command line option
- Refactor
file_export
andrich_console
- help screen displays defaults and valid ranges for int types
- yara-python compiles files directly
- Add
--rule-dir
option for loading all.yara
files in directories - Add
--regex_modifier
option
- Add
Yaralyzer.for_rules_dir()
constructor to load all.yara
files in a directory - Change command line arguments
-y
to-Y
and-r
to-re
- Respect the
--suppress-decodes
option and min / max decode length options - Add
highlight_style
argument toYaralyzer
- Expose
Yaralyzer.match_iterator()
that calls back withBytesMatch
objects