Information on Rules
Some basic information on YARA rule type.
Storm's custom YARA scanner reads the detection info from the meta section of the YARA rule. Below is the only information required to successfully create a rule.
Under your meta section, you must include a rule_name and type. Everything else you add is optional and does not affect the scanning of the rule.
Last updated