cuckoo-modified icon indicating copy to clipboard operation
cuckoo-modified copied to clipboard

No yara rule is matching with Cuckoo Analysis

Open masifpak opened this issue 8 years ago • 2 comments

I have configured yara rules with cuckoo as the best of my knowledge. But when I see the analysis report, all reports are empty of yara rule. I mean no rule match. Am I doing something wrong. How can I verify integration of yara with with cuckoo.

masifpak avatar Apr 12 '17 10:04 masifpak

if you followed this guide http://yara.readthedocs.io/en/v3.5.0/gettingstarted.html check on the process log because some custom yara rules raise errors giving you empty results on the yara tab. remeber also to install yara-python. regards

Nwinternights avatar Apr 14 '17 05:04 Nwinternights

I did the same as in tutorial but still yara tab is empty.

masifpak avatar Jul 04 '17 06:07 masifpak