gormaniac

// Just the example code, without comments.

$filter="-#test.tag"
$start="{ it:app:yara:rule=$rule | "
$end=" return($node) }"
$instruction=$lib.str.concat($start, $filter, $end)
$rules=$lib.list()
it:app:yara:rule:enabled=true |
$rules.append($node.value()) |
spin |