Hi, this is the diff to use yara with volatility.
Ok? Cheers, Remi.
Index: Makefile =================================================================== RCS file: /cvs/ports/security/volatility/Makefile,v retrieving revision 1.2 diff -u -p -u -p -r1.2 Makefile --- Makefile 15 Sep 2014 08:31:12 -0000 1.2 +++ Makefile 18 Sep 2015 20:58:05 -0000 @@ -3,7 +3,7 @@ COMMENT = memory artifact extraction utility framework MODPY_EGG_VERSION = 2.4 -REVISION = 0 +REVISION = 1 DISTNAME = volatility-${MODPY_EGG_VERSION} CATEGORIES = security @@ -18,7 +18,8 @@ MASTER_SITES = http://downloads.volatil MODULES = lang/python MODPY_SETUPTOOLS = Yes -RUN_DEPENDS = security/distorm3 +RUN_DEPENDS = security/distorm3 \ + security/yara/python NO_TEST = Yes