- Does not require yara to be deployed (embeds all needed native dependencies)
- Supports two modes of operation:
- External: yara binary extracted and executed as a child process
- Embedded: yara jnilib runs embedded in the java process
- Rules can be loaded as strings, files or archives; for archives will recursively look for and load all yara rule files
- Matches are returned with identifier, metadata and tags
Example (building from 3.4.0 version)
git clone https://github.com/plusvic/yara.git
cd yara
git checkout tags/v3.4.0
./bootstrap.sh
./configure
make
Example (in "yara" folder):
git clone https://github.com/papostolescu/yara-java.git
cd yara-java
mvn clean install
See the unit tests