EDR: CB-Yara-Connector: How to Export Yara Rules

EDR: CB-Yara-Connector: How to Export Yara Rules

Environment

  • EDR Server: All Supported Versions
  • CB-Yara-Connector: 2.2.x +

Objective

Export Yara rules to another server instance

Resolution

  • Rules can be downloaded from the Yara-Manager UI page by using the 'Download' button.
  • A more efficient way of exporting the rules would be by using the terminal to backup the rule files, then move them to the new Yara Connector instance in the same yara_rules directory.  The Yara rule files are in the file format of <file>.yar.  The yara_rules directory is located here:
/etc/cb/integrations/cb-yara-connector/yara_rules/*
 

Related Content


Tags (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎10-01-2021
Views:
88