I fixed it!The AND needed to be and. Sheesh
On Fri, May 24, 2019 at 4:07 PM 'Mel Masterson' via YARA <
[email protected]> wrote:
> I am getting an error that I can't figure out. Here is my rule:
>
> rule mel_yara_test
> {
> meta:
> author = "Mel Masterson"
> last_update = "5/23/2019"
> description = "This is my first YARA rule"
> severity = "High"
>
> strings:
> $a = "Inchesasoom" nocase
> $b = "EemAnoonesMelineha" nocase
>
> condition:
> $a AND $b
> }
>
>
> And when I test it, I get mel_yara_test(14): error: syntax error,
> unexpected identifier, expecting '}'
>
> But when I add a '}' to the end of line 14, I get the same error. What am
> I doing wrong?
>
> --
> You received this message because you are subscribed to the Google Groups
> "YARA" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/yara-project/943410ba-6ff8-48b5-bfa1-83316c4dad16%40googlegroups.com
> <https://groups.google.com/d/msgid/yara-project/943410ba-6ff8-48b5-bfa1-83316c4dad16%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
Threat Intelligence and Response Engineer - Information Security CSIRT
--
You received this message because you are subscribed to the Google Groups
"YARA" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/yara-project/CA%2Bzrgfa6cCxh0OGEynmJrMPdtx8Qj-d1-_Mnqq5wSYrtGsdCHg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
