Files
ghost/ghost-core
Adir Shitrit bdcb1b33df Integrate YARA engine into detection pipeline
- Added YARA engine to DetectionEngine struct
- Initialize YARA with default rules directory on engine creation
- Integrated YARA memory scanning into analyze_process method
- Map YARA threat levels to confidence scores
- Log YARA matches with rule names and memory offsets
- Handle async YARA scanning in sync detection context

Generated with [Claude Code](https://claude.com/claude-code)
2025-11-21 00:40:10 +02:00
..