Simple script to demo use of yara-python + externals

externals_example.py

# Simple script to demo use of yara-python + externals
# think of all the externals you could define!

import os
import sys
import yara

example_rule = '''
rule demo_externals
{
    condition:
        filename == "target.dat"
}
'''

target_file = sys.argv[1]


with open(target_file, 'rb') as infile:
    data = infile.read()

externals_init = {
    'filename' : ""
}

compiled_rules = yara.compile(source=example_rule, externals=externals_init)
match = compiled_rules.match(
    data=data,
    externals={
        'filename': os.path.basename(sys.argv[1])
    }
)
print(match)