stalkerware-indicators-rs

Parser for Echap's stalkerware-indicators repo.

Usage

See the documentation.

Lint a file

git clone https://github.com/AssoEchap/stalkerware-indicators
cargo run --example lint -- stalkerware-indicators/ioc.yaml

License

MIT/Apache2

lib.rs:

Parse a stalkerware-indicators yaml into a list of Rules.

Example

use anyhow::Context;
use std::fs;

fn main() -> anyhow::Result<()> {
    let buf = fs::read("test_data/ioc-2022-12-15.yaml")
        .context("Failed to read ioc yaml file")?;

    let rules = stalkerware_indicators::parse_from_buf(&buf);
    for rule in rules {
        println!("Rule: {:?}", rule);
    }

    Ok(())
}