Getting Yara rules

To launch Yara scans on SES Evolution agents, you must have Yara rules. There are several ways to obtain some:

  • Retrieve Yara rules shared publicly by organizations such as the CERT-FR.

  • Download Yara analysis units available on the Stormshield server. These units contain Yara rules. For more information, refer to the section Downloading Stormshield updates.

  • Create your own Yara rules. For more information, refer to the Yara documentation