Class: YaraTools::Splitter

Inherits:
Object
  • Object
show all
Defined in:
lib/yara-normalize/yara-normalize.rb

Class Method Summary collapse

Class Method Details

.split(ruleset) ⇒ Object 



104
105
106
107
108
 
# File 'lib/yara-normalize/yara-normalize.rb', line 104

def Splitter.split(ruleset)
	ruleset.gsub(/[\r\n]+/,"\n").gsub(/^\s*\/\/.*$/,'').scan(/(rule\s+([\w\-]+)(\s*:\s*(\w[\w\s]+\w))?\s*\{\s*(meta:\s*(.*?))?strings:\s*(.*?)\s*condition:\s*(.*?)\s*\})/m).map do |rule|
		YaraRule.new(rule[0])
	end
end