8000 *AND* and *OR* operators · Issue #6 · jeromesegura/EKFiddle · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

*AND* and *OR* operators #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
MFMokbel opened this issue Aug 13, 2023 · 1 comment
Open

*AND* and *OR* operators #6

MFMokbel opened this issue Aug 13, 2023 · 1 comment

Comments

@MFMokbel
Copy link
MFMokbel commented Aug 13, 2023 •
edited
Loading

Hi, Jérôme,

You have added the operators *AND* and *OR* to the SourceCode rule type. Looking into it, I realized that you're checking for the existence of both operators in the same rule, but that doesn't make sense!

For example,

SourceCode HellowWorld potato *AND* chips *OR* lays

Interpreting the above rule with this logic (from left-to-right) would be as follows: both the strings "potato" AND "chips" have to exist, and then, either "chips" OR "lays" could exist!

It would make sense if I read it this way, you're implying that either the *AND* operator statement holds true or the *OR* operator statement holds true.
@MFMokbel
Copy link
Author

Either way, I have updated EKFiddle2Yara to account for the new operators *AND* and *OR* that were added recently to the EKFiddle rule language. EKFiddle2Yara treats them as mutually exclusive to a given rule. Only one of the operators is accounted for in a given rule.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@MFMokbel
0