oalabs
patreon
Introduction to YARA Part 4 - Writing Efficient YARA Rules
🕑 Added 2024-01-17 01:01:35 +0000 UTCUnlocked For Everyone 🔓
This is the final part of our four-part tutorial series covering YARA basics. In this tutorial we cover the foundations of writing efficient YARA rules and provide some tips that can help speed up your YARA hunts.
To accompany this tutorial we also have a post on the UnpacMe site that covers the basics of Writing Efficient Rules.
References
- YARA Performance Guidelines (Florian Roth)
- Avast Engineering YARA performance series
- YARA GitHub issue #1415
- YARA GitHub issue: YARA Scan Performance for Large Files is poor
Comments
gdpqq
This is great advice!
