Questions tagged [yara]

YARA is a tool for classifying and identifying malware.

2 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6 votes
1 answer
226 views

How to find malware added in supply chain to Android phone?

As has become a mainstream news story many times over, some Android phones are being shipped with malware preinstalled, because they go from factory to a second party who adds the malware and then to ...
flane's user avatar
  • 69
0 votes
0 answers
254 views

False Positives for YARA rule

I've run a malware ruleset from the Yara rules repository run on my Sys32 directory yara64.exe -f -r ./malware_index.yar C:\Windows\System32 and come across a lot of positives (+extra counts) for ...
N S's user avatar
  • 41