stalkerware-indicators-rs

Echap 的 stalkerware-indicators 仓库的解析器。

用法

参阅 文档。

检查文件

git clone https://github.com/AssoEchap/stalkerware-indicators
cargo run --example lint -- stalkerware-indicators/ioc.yaml

许可

MIT/Apache2

lib.rs:

将 stalkerware-indicators 的 yaml 解析为 Rule 列表。

示例

use anyhow::Context;
use std::fs;

fn main() -> anyhow::Result<()> {
    let buf = fs::read("test_data/ioc-2022-12-15.yaml")
        .context("Failed to read ioc yaml file")?;

    let rules = stalkerware_indicators::parse_from_buf(&buf);
    for rule in rules {
        println!("Rule: {:?}", rule);
    }

    Ok(())
}