In diary entry “Creating a YARA Rule to Detect Obfuscated Strings” I explain how to tune a YARA rule with regular expressions for performance.
Article Link: https://isc.sans.edu/diary/rss/30206
In diary entry “Creating a YARA Rule to Detect Obfuscated Strings” I explain how to tune a YARA rule with regular expressions for performance.
Article Link: https://isc.sans.edu/diary/rss/30206