Loki icon indicating copy to clipboard operation
Loki copied to clipboard

Add YARA repositories manually

Open zaqes opened this issue 2 years ago • 2 comments

Would be nice if this could be included. I guess I could just update the UPDATE_URL_SIGS with the URLs (?), but a command would be nice.

zaqes avatar Feb 17 '23 14:02 zaqes

That's YARA rule management; not necessarily a task of the scanner. Furthermore, other YARA rule repos are often shit. They contain expensive rules or rules that trigger tons of FPs. So be careful using them.

Neo23x0 avatar Feb 17 '23 15:02 Neo23x0

That's true!

So update the list in UPDATE_URL_SIGS would be the best way forward at the moment?

zaqes avatar Feb 20 '23 07:02 zaqes