Maintained with ☕️ by
IcePanel logo

The following new YARA-L 2.0 functions are available in Rules and Search

Share

Services

## Feature The following new YARA-L 2.0 functions are available in Rules and Search: * arrays.concat * arrays.join\_string * arrays.max * arrays.min * arrays.size * arrays.index\_to\_int * cast.as\_bool * cast.as\_float * math.ceil * math.floor * math.geo\_distance * math.is\_increasing * math.pow * math.random * strings.contains * strings.count\_substrings * strings.extract\_domain * strings.extract\_hostname * strings.from\_hex * strings.ltrim * strings.reverse * strings.rtrim * strings.trim * strings.url\_decode * timestamp.as\_unix\_seconds * timestamp.now The following new YARA-L 2.0 functions are available in Rules: * hash.sha256 * window.avg * window.first * window.last * window.median * window.mode * window.stddev * window.variance Details on function signatures and behavior can be found in [YARA-L2.0 Function Syntax Reference Documentation](https://cloud.google.com/chronicle/docs/detection/yara-l-2-0-syntax#functions%5F2)