Volatility errors out because of no Yara installed while running the Yarascan plugin. There is no Yara package in Synaptic.
vol --profile=WinXPSP2x86 -f "/root/file" yarascan Volatile Systems Volatility Framework 2.1 ERROR : volatility.plugins.malware.malfind: Please install Yara from code.google.com/p/yara-project
crossbower
2013-06-11 20:35
reporter ~0000539
Hello,
can you recheck the error now that yara and yara-python packages are in the repository?
I've not added the dependency to Volatility, you must install them with: apt-get update apt-get install yara yara-python
