diff --git a/doc/yara.md b/doc/yara.md index 238db25e1fddf..e5237c8f7d57a 100644 --- a/doc/yara.md +++ b/doc/yara.md @@ -18,8 +18,8 @@ Requirements ------------ You can either install libyara with your prefered package manager, or you -can execute sys/yara.sh in order to retrieve latest source, compile, and -install the library. +can execute `r2pm -i yara3-lib` and `r2pm -i yara3` in order to retrieve +latest source, compile, and install the library. Yara in radare2 ---------- @@ -44,13 +44,13 @@ Example Load a rule file on the fly, and then scan the currently opened file: ``` -yara add /home/name/rules/malware.rules -yara scan +yara3 add /home/name/rules/malware.rules +yara3 scan ``` Yara versions ------------- -Because radare2 has support for both yara versions currently, +Because radare2 has support for both yara versions currently, depending from the version/plugin you've loaded, you need to use the proper versioned command. E.g. `yara2` or `yara3`. For example `yara3 scan`. diff --git a/sys/yara3.sh b/sys/yara3.sh deleted file mode 100644 index b74f166dbec30..0000000000000 --- a/sys/yara3.sh +++ /dev/null @@ -1,6 +0,0 @@ -#!/bin/sh -if [ ! -d radare2-extras ]; then - git clone https://github.com/radare/radare2-extras -fi -cd radare2-extras || exit 1 -sys/yara3.sh