๐Ÿ“š MODULE DOCS

Advanced โ†’ Module Docs
๐Ÿ“– All Levels

๐Ÿ“š What You'll Learn Here

Quick reference for all YARA modules โ€” PE, ELF, Magic, Hash, Math, Cuckoo, DotNET, and their functions.

Learning Outline

  • 1. PE Module Reference โ€” `pe.is_pe`, `pe.sections[i].name`, `pe.imports()`, `pe.exports()`, `pe.version_info`
  • 2. ELF Module Reference โ€” `elf.is_elf`, `elf.type`, `elf.entry_point`, `elf.section()`, `elf.dynamic_symbols`
  • 3. Magic Module Reference โ€” `magic.type()`, `magic.mime_type()`, `magic.desc()`
  • 4. Hash Module Reference โ€” `hash.md5()`, `hash.sha1()`, `hash.sha256()`
  • 5. Math Module Reference โ€” `math.entropy()`, `math.arithmetic`, `math.statistics`
  • 6. Cuckoo Module Reference โ€” `cuckoo.behavior_summary`, `cuckoo.signatures`
  • 7. DotNET Module Reference โ€” `dotnet.is_dotnet`, `dotnet.guid`, `dotnet.typelib`
  • 8. Console Module Reference โ€” `console.log()` for debugging
  • 9. Time Module Reference โ€” `time.now()`, `time.unix_time`
  • 10. Strings Module Reference โ€” `strlen()`, `strpos()`, `toupper()`
๐Ÿ› ๏ธ MODULE BROWSER (Coming Soon)
Searchable module documentation with examples.

๐Ÿ”— Resources