-
Notifications
You must be signed in to change notification settings - Fork 60
Open
Description
Yextend is designed to be compiled from source and invokes a couple of subprocesses (pdfdetach, pdftotext, yara). This makes it challenging to build and run in an isolated environment (e.g. AWS Lambda).
Ideally, yextend could be a pip package (or similar) which could be installed on any platform (much like yara itself).
For reference, the BinaryAlert documentation describes how we were able to get a portable yextend binary: we commented out the yara version check and copied the necessary .so files (but this likely doesn't solve the pdf parsing subprocess calls)
Thanks again for contributing such a useful tool!
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels