oalabs
patreon
Introduction to YARA Part 3 - Rule Use Cases
🕑 Added 2024-01-17 00:41:59 +0000 UTCUnlocked For Everyone 🔓
This is the third part of our four-part tutorial series covering YARA basics. In this tutorial we cover different use cases for YARA and how these use cases will impact the rule development and deployment.
Unlike the other tutorials in this series this tutorial is more theoretical and is intended to provide some background on when certain types of rules should and should not be used. There is a technical counterpart of this tutorial that we have published on the UnpacMe site with tutorials that demonstrate building each type of rule discussed in this tutorial.
Identifying specific malware families (unpacked)
Identifying malware on disk or in network traffic (packed)
Hunting (malware characteristics)
