IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: What Are Yara Rules?

App Control: What Are Yara Rules?

Environment

  • App Control: 8.0 and Higher

Question

What are Yara rules?

Answer

Yara rules are used for core logic in the App Control agent. They contain information such as "is this file an installer?" and "is this file a script?". They have the potential to change over time and the architecture is in place to deliver upgrades via the Collective Defense Cloud (much like how Updaters and Rapid Configs get updated).

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
2143
Contributors