📜Information on Rules

Some basic information on YARA rule type.

circle-info

Storm's custom YARA scanner reads the detection info from the meta section of the YARA rule. Below is the only information required to successfully create a rule.

  • Under your meta section, you must include a rule_name and type. Everything else you add is optional and does not affect the scanning of the rule.

meta:
	    rule_name = "Example Cheat" // Name of cheat
	    type = "Detect" // Warning or Detect
	    author = "Saxony" // Optional data that can be added

Last updated