MHL has also updated malfind2 to work with Yara 1.4a, so this script is compatible with those changes.
I have only tested this on Ubuntu and Mac OSX (with MacPorts installed).
- You must run this script as root
- This script also installs Volatility using SVN. If you are running Ubuntu or Mac it will check that SVN is installed, and if not, will install it and pull down Volatility in the current directory.
- If you are running Ubuntu or Mac OSX, this script will install other dependencies you will need like pcregrep libpcre++-dev python-dev for Ubuntu or pcre pcre++ for Mac.
- This script installs dependencies: pefile, libdasm, pycrypto, yara-python 1.4a, as well as all known Volatility plugins, including the newer VAP ones from MHL
You still have to install Inline::Python on your own.
You can find the script in my GitHub repository or as raw text here