Getting Yara rules

To launch Yara scans on SES Evolution agents, you must have Yara rules. There are several ways to obtain some:

  • Retrieve Yara rules shared publicly by organizations such as the ANSSI or CERT-FR.

  • Create your own Yara rules. For more information, refer to the Yara documentation