Loki
Loki copied to clipboard
Add YARA repositories manually
Would be nice if this could be included. I guess I could just update the UPDATE_URL_SIGS with the URLs (?), but a command would be nice.
That's YARA rule management; not necessarily a task of the scanner. Furthermore, other YARA rule repos are often shit. They contain expensive rules or rules that trigger tons of FPs. So be careful using them.
That's true!
So update the list in UPDATE_URL_SIGS would be the best way forward at the moment?