Does Yara regex rule support the multi-line option?
Author: patternhelloworldCreated Aug 16, 2019Updated Dec 8, 2024
In regex, setting regex options to "multiline" means that "^" matches the start of each line and "$" matches the end of each line. But Yara rules does not seem to support it. For example, this does not work. Is there any ways to solve the issue?
rule PinenoteSolo { strings: $a= /^{"[0-9]+?.hocr.+?2Ta家$/ wide ascii
condition: $a }
Source: VirusTotal/yara