Unprotect-Project/Unprotect_Submission

capa2yara

Opened this issue · 1 comments

hi,

you might be interested in https://github.com/ruppde/yara_rules/tree/main/capa2yara as that converts many of the fine capa rules to yara (generated .yar in the repo are old). the script now lives on https://github.com/mandiant/capa/blob/master/scripts/capa2yara.py

sorry, I don't have enough time to contribute that properly.

regards
arnim

This is awesome thanks for sharing it :)