YARA Scan

自動配備

Filigranの提供による

Detection & Response Enablement

概要

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

基本情報

統合ドキュメントとコードYARA Scan

タイプ

コネクター

OpenCTI 互換バージョン6.8.13

OpenCTI ハブバージョンからデプロイ可能6.8.13

OpenCTI ドキュメントhttps://docs.opencti.io/latest/usage/import/external-connectors/

YARA Scan

概要

This OpenCTI connector enriches Artifact Observables by scanning their contents using every YARA Indicator in the system. When a rule matches, the connector creates a relationship between the Artifact and Indicator.

基本情報

クッキー設定