-
Notifications
You must be signed in to change notification settings - Fork 54
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add option to scan children in YARA plugin #780
Add option to scan children in YARA plugin #780
Conversation
dissect/target/tools/yara.py
Outdated
for target in Target.open_all(args.targets): | ||
target.log.info("Scanning target") | ||
for target in Target.open_all(args.targets, args.children): | ||
target.log.info("Scanning target %s", target) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Because you use target.log
, it should already include the target repr in the log line, does logging it again really help?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agreed, removed in 870e9db.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Now you removed the entire log line, was that intended? My comment was towards the additional %s
of the target object.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes I think the entire line is unnecessary due to additional logging by the filesystem.yara
plugin
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #780 +/- ##
=======================================
Coverage 75.23% 75.23%
=======================================
Files 296 296
Lines 25556 25556
=======================================
Hits 19228 19228
Misses 6328 6328
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
This is a small improvement on #646 that adds
--children
totarget-yara
/target-query -f yara
.