Actionable Threat Intel (III) - Introducing the definitive YARA editor
ID: 31af850c-3dc2-55c8-95b6-a7ee2404f3bc
STIX ID: report--31af850c-3dc2-55c8-95b6-a7ee2404f3bc
Feed Name: VirusTotal Blog
VirusTotal introduces a reengineered YARA editor integrated with Livehunt and Retrohunt, adding syntax coloring, auto-complete, rule templates, and a testing playground to validate rules against IoCs; the vt module expands YARA beyond file content to metadata and behavior (e.g., ITW domains, sandbox DNS lookups) for more precise detections and streamlined notifications via IoC Stream, with an example file rule provided and further vt improvements forthcoming.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
