[_8j50]

If all you have is a Rusty hammer, everything is a nail.

Third party module dev is harder now for yara-x. And I wonder how the python module will turn out.

Neither 3rd party/go clients nor the official virustotal C client could meet my requirements, I had to write a scanner in python on at least two different times and having to do it again soon. The main issues are resource usage, result shuffling and supporting very large proprietary ruled that depend on specific yara modules.

Crowsresponse by crowdstrike is better too but it still has limits. Python is the best way to yara.

[viraptor]

> Third party module dev is harder now for yara-x.

In what way / what's harder about it?

[_8j50]

For one, less people know rust. Also, having to port your c modules.