1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE language>
<language name="YARA" section="Other" version="5" kateversion="5.53" indenter="cstyle" extensions="*.yar;*.yara" license="MIT">
<highlighting>
<list name="keywords">
<item>all</item>
<item>and</item>
<item>any</item>
<item>ascii</item>
<item>at</item>
<item>base64</item>
<item>base64wide</item>
<item>condition</item>
<item>contains</item>
<item>endswith</item>
<item>entrypoint</item> <!-- being deprecated-->
<item>filesize</item>
<item>for</item>
<item>fullword</item>
<item>global</item>
<item>icontains</item>
<item>iendswith</item>
<item>iequals</item>
<item>import</item>
<item>in</item>
<item>include</item>
<item>int8</item>
<item>int16</item>
<item>int32</item>
<item>int8be</item>
<item>int16be</item>
<item>int32be</item>
<item>istartswith</item>
<item>matches</item>
<item>meta</item>
<item>nocase</item>
<item>none</item>
<item>not</item>
<item>or</item>
<item>of</item>
<item>private</item>
<item>rule</item>
<item>startswith</item>
<item>strings</item>
<item>them</item>
<item>uint8</item>
<item>uint16</item>
<item>uint32</item>
<item>uint8be</item>
<item>uint16be</item>
<item>uint32be</item>
<item>wide</item>
<item>xor</item>
</list>
<list name="boolean">
<item>false</item>
<item>true</item>
</list>
<contexts>
<context attribute="Normal Text" lineEndContext="#stay" name="Normal">
<keyword attribute="Keyword" context="#stay" String="keywords"/>
<keyword attribute="Boolean" String="boolean" context="#stay"/>
<DetectChar attribute="String" context="String" char="""/>
<!--<IncludeRules context="##Doxygen" />-->
<Detect2Chars attribute="Comment" context="Comment" char="/" char1="/"/>
<Detect2Chars attribute="Comment" context="Multiline Comment" char="/" char1="*" beginRegion="Comment"/>
<RegExpr attribute="Identifier" context="#pop" String="\$\w*" />
<RegExpr attribute="Rule" context="#stay" String="(?<=rule\s)\s*[_a-zA-Z]\w{0,127}" />
<RegExpr attribute="Hex String" context="#stay" String="(?<=[\]{\(|\)])[\s]*?(?:[\dA-Fa-f?]{2}[\s]*?)+(?=[\(|\)}\[])" />
<!-- Regular Expressions, obtained from javascript.xml -->
<RegExpr attribute="Start Regular Expression" context="(regex caret first check)##JavaScript" String="/(?=(?:[^/\\\[]|\\.|\[(?:[^\]\\]|\\.)+\])+/(?:[gimsuy]+(?!\s*[\w$])|(?![/\*])|(?=/\*)))" />
<DetectChar attribute="Symbol" context="#stay" char="{" beginRegion="block1"/>
<DetectChar attribute="Symbol" context="#stay" char="}" endRegion="block1"/>
<Float attribute="Float" context="#stay"/>
<HlCHex attribute="Hex" context="#stay"/>
<Int attribute="Decimal" context="#stay"/>
</context>
<context attribute="String" lineEndContext="#pop" name="String">
<LineContinue attribute="String" context="#pop"/>
<HlCStringChar attribute="String Char" context="#stay"/>
<DetectChar attribute="String" context="#pop" char="""/>
</context>
<context attribute="Comment" lineEndContext="#pop" name="Comment">
<DetectSpaces />
<IncludeRules context="##Comments"/>
</context>
<context attribute="Comment" lineEndContext="#stay" name="Multiline Comment">
<DetectSpaces />
<Detect2Chars attribute="Comment" context="#pop" char="*" char1="/" endRegion="Comment"/>
<IncludeRules context="##Comments"/>
</context>
</contexts>
<itemDatas>
<itemData name="Normal Text" defStyleNum="dsNormal" spellChecking="false"/>
<itemData name="Keyword" defStyleNum="dsKeyword" spellChecking="false"/>
<itemData name="Rule" defStyleNum="dsFunction" spellChecking="false"/>
<itemData name="Boolean" defStyleNum="dsConstant" spellChecking="false"/>
<itemData name="Identifier" defStyleNum="dsVariable" spellChecking="false"/>
<itemData name="Decimal" defStyleNum="dsDecVal" spellChecking="false"/>
<itemData name="Hex" defStyleNum="dsBaseN" spellChecking="false"/>
<itemData name="Hex String" defStyleNum="dsSpecialString" spellChecking="false"/>
<itemData name="Float" defStyleNum="dsFloat" spellChecking="false"/>
<itemData name="String" defStyleNum="dsString"/>
<itemData name="String Char" defStyleNum="dsSpecialChar" spellChecking="false"/>
<itemData name="Comment" defStyleNum="dsComment"/>
<itemData name="Symbol" defStyleNum="dsNormal"/>
<itemData name="Start Regular Expression" defStyleNum="dsSpecialString" spellChecking="false" />
</itemDatas>
</highlighting>
<general>
<comments>
<comment name="singleLine" start="//" position="afterwhitespace" />
<comment name="multiLine" start="/*" end="*/" region="Comment" />
</comments>
</general>
</language>
<!-- kate: replace-tabs on; tab-width 2; indent-width 2; -->
|
