YARA is the swiss-army knife for pattern matching. It is easy to use, fast and powerful which already led to a quick adoption of it in a variety of platforms. It provides unprecedented capabilities for finding the evil with only a few lines of script. This goes the same for Incident Response and compromise assessment.
- 1
- 2
Recent Posts
-
SHIELDing DFIR against CryptoLockers!
Some History It was around 7 years ago when I a...0 comments -
IREC v2
It has been quite a long time since the last ti...0 comments -
Incident Response Plan
Incident Response is a set of actions aiming to...0 comments -
5 Measures to Work Remotely in Secure
Covid-19 pandemic has become the most important...0 comments -
YARA+ : Extending YARA for Incident Response
YARA is the swiss-army knife for pattern matchi...0 comments