YARA Scan

Automatic deploy

Supported by Filigran

Detection & Response Enablement

Overview

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

Basic information

Integration documentation and codeYARA Scan

Type

Connectors

OpenCTI compatibility version6.8.13

OpenCTI Documentationhttps://docs.opencti.io/latest/usage/import/external-connectors/

Shares0

YARA Scan

Overview

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

Basic information

Cookie settings