Environment
- CB Response: 6.x
- CB Yara connector 1.x
Objective
To purge the Yara database, most typically in order to allow the system to re-scan all binaries in the deployment.
Resolution
- Log into the CB Response master server
- Delete: /usr/share/cb/integrations/yara/db/sqlite.db
- Restart the Yara connector:
# service cb-yara-connector restart
Additional Notes
A new sqlite.db file will be created after the cb-yara-connector process begins.
Related Content
