Python interface for YARA, a powerful malware identification and classification tool
Overall
score
85%
Evaluation — 85%
↓ 0.94xAgent success when using this tile
{
"context": "This evaluation assesses how effectively the engineer uses the yara-python package's warnings callback functionality to capture and report runtime warnings during YARA rule scanning. The focus is on proper implementation of the warnings_callback parameter and handling of warning data.",
"type": "weighted_checklist",
"checklist": [
{
"name": "Warnings callback implementation",
"description": "Implements a warnings_callback function and passes it to the rules.match() method using the warnings_callback parameter",
"max_score": 30
},
{
"name": "Warning type handling",
"description": "Correctly checks the warning type against yara.CALLBACK_TOO_MANY_MATCHES or other YARA warning type constants",
"max_score": 20
},
{
"name": "Warning data extraction",
"description": "Extracts warning information from the callback parameters, including rule name and string identifier from the rule_string_tuple or equivalent structure",
"max_score": 20
},
{
"name": "Callback return value",
"description": "Returns yara.CALLBACK_CONTINUE from the warnings callback to ensure scanning continues after warnings",
"max_score": 15
},
{
"name": "Rule compilation",
"description": "Uses yara.compile() with source parameter to compile YARA rules from string input",
"max_score": 10
},
{
"name": "Scan execution",
"description": "Uses the rules.match() method with data or filepath parameter to execute scanning",
"max_score": 5
}
]
}Install with Tessl CLI
npx tessl i tessl/pypi-yara-pythonevals
scenario-1
scenario-2
scenario-3
scenario-4
scenario-5
scenario-6
scenario-7
scenario-8
scenario-9
scenario-10