Getting Yara rules
To launch Yara scans on SES Evolution agents, you must have Yara rules. There are several ways to obtain some:
-
Retrieve Yara rules shared publicly by organizations such as the CERT-FR.
-
Download Yara analysis units available on the Stormshield server. These units contain Yara rules. For more information, refer to the section Downloading Stormshield updates.
-
Create your own Yara rules. For more information, refer to the Yara documentation