binaryalert icon indicating copy to clipboard operation
binaryalert copied to clipboard

Provide a means of automatically building yara rules

Open jdheyburn opened this issue 5 years ago • 0 comments

Background

Typical usage of this module is build once, deploy once. And given that yara rules are compiled at build time, over time the lambda analyser that has been deployed will be out of date with new yara rules.

Desired Change

As an example implementation, we could deploy a lambda function that would periodically build the yara rules and store them in a location that the analyser lambda can retrieve them from to run the analyser against.

jdheyburn avatar Aug 27 '20 12:08 jdheyburn