Table of Contents

1. ROST: the Rule-Oriented Scanning Tool
1. Basic usage overview
2. Typical rule structure
3. Searching for bytes patterns
4. Condition specifications for rules matching
5. Core modules extending the grammar
6. Modules relying on Chrysalide's plugins
7. Differences between ROST and YARA
8. Extending ROST engine with plugins
9. Bad behaviour fixed
2. Tools and tips for hacking the code
1. Libraries with debug symbols
2. Valgrind: memory and CPU profiling
3. AFL++: fuzzing