Questions tagged [yara]
YARA is a tool for classifying and identifying malware.
2
questions with no upvoted or accepted answers
6
votes
1
answer
226
views
How to find malware added in supply chain to Android phone?
As has become a mainstream news story many times over, some Android phones are being shipped with malware preinstalled, because they go from factory to a second party who adds the malware and then to ...
0
votes
0
answers
254
views
False Positives for YARA rule
I've run a malware ruleset from the Yara rules repository run on my Sys32 directory
yara64.exe -f -r ./malware_index.yar C:\Windows\System32
and come across a lot of positives (+extra counts) for ...