0 Replies Latest reply on Aug 11, 2015 6:50 AM by jtyt

    Does any of you tried some Yara rules ?


      I wanted to test some Yara Rules (especially the ones for Hacking Team binaries).


      I found a good repo : Yara-Rules/rules · GitHub

      But I'm not able to upload the files, I'm getting such errors :


      2015-08-11-02:55:58: error: 1 error(s) during rules compilation.

      yara error: in custom rule file at line=263: undefined identifier "uint32be"

      2015-08-11-02:58:36: Modules import for custom behavioral rules is not supported


      The version of the Yara rules are 3.0 and I'm using an ATD6000 3.4.8 which is stated to support 3.0 rules.


      I would also be glad if you can share your Yara rules good sources.