Difference between revisions of "Yara"

From truxwiki.com
Jump to navigation Jump to search
(Created page with "{| style="float:right;border:1px solid black" |+ Details | Executable | <code>Archives.exe</code> |- | Stage | style="text-align:center;" | 6 |- | Percent Complete | style="te...")
 
Line 11: Line 11:
 
|-
 
|-
 
| Message Queue
 
| Message Queue
−
| <code>archives</code>
+
| style="text-align:center;" | <code>yara</code>
 
|}
 
|}
  

Revision as of 12:57, 25 January 2021

Details
Executable Archives.exe
Stage 6
Percent Complete 48%
Message Queue yara

Yara ETL uses the malware scanning tool called, well, YARA to scan files. When a rule hits, the file will be tagged with the name of the rule. If any tags were specified in the YARA rule, they will also be applied to the file.

File Types

Yara scan the following types of files:

Retrieved from "https://truxwiki.com/index.php?title=Yara&oldid=3419"