You are browsing the archive for Yara sigs.

Yara rules pageant

January 21, 2023 in Yara sigs

A few days ago I posted a very specific question on Twitter and Mastodon: You’ve got gazillion of random yara rules stored inside many random .yar files scattered around many […]

Yara Carpet Bomber, Part 2

January 18, 2022 in Yara sigs

Steve asked about the use cases for Yara Carpet Bomber approach and in this twitter convo I provided 2 examples of quick & dirty Yara rules: that help to find […]