Getting Yara rules
To launch Yara scans on SES Evolution agents, you must have Yara rules. There are several ways to obtain some:
- 
                                                            Retrieve Yara rules shared publicly by organizations such as the CERT-FR. 
- 
                                                            Download Yara analysis units available on the Stormshield server. These units contain Yara rules. For more information, refer to the section Downloading Stormshield updates. 
- 
                                                            Create your own Yara rules. For more information, refer to the Yara documentation