Similar to the question asked below. I have a set of say four 32bit or 64bit values and it should be a positive match if they are all within 3000 bytes of each other.
In the YARA pdf manual under "Iterating over string occurrences" it looks like this can be done but having trouble working this out, and so far have found no example of it's usage outside of the manual. If anyone has worked this out rule condition and/or can point me to a URL with examples, please reply. -- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/yara-project/b0f221d6-0d09-4b31-8d00-0eaa23190847n%40googlegroups.com.
