πŸ“œInformation on Rules

Some basic information on YARA rule type.

Storm's custom YARA scanner reads the detection info from the meta section of the YARA rule. Below is the only information required to successfully create a rule.

  • Under your meta section, you must include a rule_name and type. Everything else you add is optional and does not affect the scanning of the rule.

meta:
	    rule_name = "Example Cheat" // Name of cheat
	    type = "Detect" // Warning or Detect
	    author = "Saxony" // Optional data that can be added

Last updated