{"action":"created","issue":{"url":"https://api.github.com/repos/Koodous/androguard-yara/issues/3","repository_url":"https://api.github.com/repos/Koodous/androguard-yara","labels_url":"https://api.github.com/repos/Koodous/androguard-yara/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/Koodous/androguard-yara/issues/3/comments","events_url":"https://api.github.com/repos/Koodous/androguard-yara/issues/3/events","html_url":"https://github.com/Koodous/androguard-yara/issues/3","id":190965063,"number":3,"title":"yara-python could not compile the rule.yar","user":{"login":"mikusjelly","id":2801072,"avatar_url":"https://avatars.githubusercontent.com/u/2801072?v=3","gravatar_id":"","url":"https://api.github.com/users/mikusjelly","html_url":"https://github.com/mikusjelly","followers_url":"https://api.github.com/users/mikusjelly/followers","following_url":"https://api.github.com/users/mikusjelly/following{/other_user}","gists_url":"https://api.github.com/users/mikusjelly/gists{/gist_id}","starred_url":"https://api.github.com/users/mikusjelly/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikusjelly/subscriptions","organizations_url":"https://api.github.com/users/mikusjelly/orgs","repos_url":"https://api.github.com/users/mikusjelly/repos","events_url":"https://api.github.com/users/mikusjelly/events{/privacy}","received_events_url":"https://api.github.com/users/mikusjelly/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-11-22T10:45:24Z","updated_at":"2016-11-22T12:52:56Z","closed_at":null,"body":"```\r\nimport \"androguard\"\r\n\r\nrule malware : \r\n{\r\n    condition:\r\n         androguard.url(/inappertising\\.org/)\r\n}\r\n```\r\n\r\n```\r\n~/androguard-yara$ yara -x androguard=1406864c1be8a763be2bba9b446a07b3e7c0b66a785f82e5005ba2bbb4305c83-report.json rule.yar sample.apk \r\nmalware sample.apk\r\n```\r\nIt works. \r\n\r\nBut I want to compile the `rule.yar` by python:\r\n```\r\n./test.py \r\nTraceback (most recent call last):\r\n  File \"./test.py\", line 13, in <module>\r\n    rules = yara.compile('rule.yar')\r\nyara.SyntaxError: rule.yar(8): invalid field name \"url\"\r\n```\r\n\r\nAny idea?\r\n"},"comment":{"url":"https://api.github.com/repos/Koodous/androguard-yara/issues/comments/262233025","html_url":"https://github.com/Koodous/androguard-yara/issues/3#issuecomment-262233025","issue_url":"https://api.github.com/repos/Koodous/androguard-yara/issues/3","id":262233025,"user":{"login":"mikusjelly","id":2801072,"avatar_url":"https://avatars.githubusercontent.com/u/2801072?v=3","gravatar_id":"","url":"https://api.github.com/users/mikusjelly","html_url":"https://github.com/mikusjelly","followers_url":"https://api.github.com/users/mikusjelly/followers","following_url":"https://api.github.com/users/mikusjelly/following{/other_user}","gists_url":"https://api.github.com/users/mikusjelly/gists{/gist_id}","starred_url":"https://api.github.com/users/mikusjelly/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikusjelly/subscriptions","organizations_url":"https://api.github.com/users/mikusjelly/orgs","repos_url":"https://api.github.com/users/mikusjelly/repos","events_url":"https://api.github.com/users/mikusjelly/events{/privacy}","received_events_url":"https://api.github.com/users/mikusjelly/received_events","type":"User","site_admin":false},"created_at":"2016-11-22T12:52:56Z","updated_at":"2016-11-22T12:52:56Z","body":"@plutec I'm not sure, I think maybe I need to build the yara-python again, and install it."}}
{"actor":{"display_login":"mikusjelly"}}