Quickie: Generating a YARA Rule to Detect Obfuscated Strings, (Sun, Sep 10th)

In diary entry “Creating a YARA Rule to Detect Obfuscated Strings” I explain how to tune a YARA rule with regular expressions for performance.

Article Link: https://isc.sans.edu/diary/rss/30206