Tags: MemNixFS/MemNixFS

MemNixFS v1.2

Highlights

Custom YARA rules

Custom YARA rules can now be loaded from individual files, directories, wildcard paths, environment variables, and per-user rule directories (#3).

YARA results now include the exact matched string, virtual address, match length, readable preview, and byte-exact hexadecimal preview.

Structured exports

Added TXT, CSV, and JSON output for YARA and IOC results, together with top-level /csv and /json directories for Splunk, SIEM, and other integrations (#4).

The export command now supports individual VFS subtrees and files, with clearer path and write-error reporting.

Performance

YARA, IOC, and forensic timeline results are cached and shared between TXT, CSV, JSON, and per-rule views, avoiding repeated full-memory scans.

Forensic warming now supports configurable worker counts through --warm-jobs and reports its total completion time.

Reliability and documentation

Invalid UTF-8 recovered from memory is handled safely in structured JSON output.

Added regression tests for YARA formatting, application paths, and forensic warming, together with updated CLI, integration, WinFsp, licensing, and attribution documentation.

What's Changed

- Added custom YARA rule support (#3).
- Added structured CSV/JSON forensic exports (#4).
- Improved YARA match accuracy, readability, and export reliability.
- Reduced repeated analysis through shared result caching.

Full Changelog: v1.1...v1.2

MemNixFS v1.1

Fix wiki workflow branch