oalabs

Introduction to YARA Part 4 - Writing Efficient YARA Rules (Patreon)

Published:

2024-01-17 01:01:35

Imported:

2024-03

Tags:

RE101 yara

Content

Unlocked For Everyone 🔓

This is the final part of our four-part tutorial series covering YARA basics. In this tutorial we cover the foundations of writing efficient YARA rules and provide some tips that can help speed up your YARA hunts.

To accompany this tutorial we also have a post on the UnpacMe site that covers the basics of Writing Efficient Rules.

References

YARA Performance Guidelines (Florian Roth)
Avast Engineering YARA performance series
YARA GitHub issue #1415
YARA GitHub issue: YARA Scan Performance for Large Files is poor

Files

Introduction to YARA Part 4 - Efficient Rule Development

In this OALABS Patreon tutorial we cover the foundations of writing efficient YARA rules and provide some tips that can help speed up your YARA hunting. ----- OALABS DISCORD https://discord.gg/6h5Bh5AMDU OALABS PATREON https://www.patreon.com/oalabs Twitch https://www.twitch.tv/oalabslive OALABS GITHUB https://github.com/OALabs UNPACME - AUTOMATED MALWARE UNPACKING https://www.unpac.me/#/ -----