[Feature] Decouple Yara Compiling

[paraknell]

What feature would you like to see?

Currently yara is compiled from source into the application. This unfortunately makes it harder to use yara(and associated rules) with custom compile instructions.

Example Repo:
https://github.com/Neo23x0/signature-base/blob/master/makefile

Would it be possible to specify a path to yara?

If there is a way to do this already, apologies, please advise.

How will this feature be useful to you and others?

• Wider array of available yara repositories
• Greater customization for how yara is compiled
• Different versions of yara could be referenced

Request Type

• I can provide a PoC for this feature or am willing to work on it myself and submit a PR

Additional context?

Other Examples:
https://github.com/KasperskyLab/klara

[WerWolv]

Hey, when configuring ImHex you can specify the -DUSE_SYSTEM_YARA=ON flag to cmake. That will make it use the yara library that's been installed on your system instead of the bundled version. Is that enough for your usecase?

[paraknell]

I have not specifically tested, but that should be sufficient.

If I am understanding correctly, I would follow this guide to build:
https://github.com/WerWolv/ImHex/blob/master/dist/compiling/windows.md
dist/compiling/windows.md and add in -DUSE_SYSTEM_YARA=ON