Explore OpenCTI or OpenAEV platform with 30 days Free Trial!
XTM Hub by FiligranSign In
Import File YARA logo

Import File YARA

Verified
Threat Intelligence

Overview

This connector ingests YARA rules into OpenCTI, converting them into Indicators.

This connector ingests YARA rules into OpenCTI, converting them into Indicators. As YARA files can contain one or multiple YARA rules, the connector can operate in two modes:

  1. Single Indicator Mode: Combines all YARA rules contained in the .yar file into one STIX Indicator. (Split Rules option: False).
  2. Split Indicator Mode: Creates individual STIX Indicators for each YARA rule contained in the .yar file. (1 flag per YARA rule) (Split Rules option: True).

Basic information

Import File YARA
Connectors
Internal import file
6.8.13
0

    We use cookies to make the XTM Hub work, understand how it's used, and improve your experience. Strictly necessary cookies are always on. With your consent, we also use optional cookies for functionality, performance and analytics, and marketing. You can accept all, reject all, or choose which optional cookies to allow. You can change your preferences at any time via "Cookie settings". See our Cookie Policy for more information.