README
¶
third_party
This directory contains YARA rules from other open-source projects
Sources
- bartblaze: https://github.com/bartblaze/Yara-rules (MIT)
- elastic: https://github.com/elastic/protections-artifacts (ESL 2.0)
- huntress: https://github.com/huntresslabs/threat-intel (MIT)
- InQuest-VT: https://github.com/InQuest/yara-rules-vt (MIT)
- JPCERT: https://github.com/JPCERTCC/jpcert-yara (BSD-3)
- TTC-CERT: https://github.com/ttc-cert/TTC-CERT-YARA-Rules (No license)
- YARAForge: https://github.com/YARAHQ/yara-forge (Mixed, embedded)
Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var FS embed.FS
SHA256SUMS manifests are excluded: their filename column lists upstream-rule paths like `Macos_Infostealer_Atomic.yar` which XProtect signature-matches on macOS, killing any process whose binary embeds them. The manifests are not currently verified by any automated workflow and are not consumed at runtime.
Functions ¶
This section is empty.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.