YARA Scan

Malware Analysis

Overview

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

Basic information

Integration documentation and codeYARA Scan

Type

Connectors

Subtype

Internal enrichment

OpenCTI compatibility version6.8.13

OpenCTI Documentationhttps://docs.opencti.io/latest/usage/import/external-connectors/

Shares0