home.social

#yara — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #yara, aggregated by home.social.

  1. Radio CORAX @[email protected] ·

    Schnellkochtopf

    Kochen ist intuitiv, ich kann improvisieren, spontan eingreifen und das Ergebnis bleibt immer ein bisschen unvorhersehbar. Beim Backen muss man... mehr

    radiocorax.de/schnellkochtopf/

    #Dramatist #fluppe #MyUglyClementine #Schraegfunk #Schrägfunk #SnakeEyes #Yara

    #dramatist #fluppe #myuglyclementine #schraegfunk #schragfunk #snakeeyes
  2. JTI @[email protected] ·

    @sodiboo @ifin @threatintel

    Also, notable mention. unexpected thread: github.com/lenucksi/aur-malwar

    Are there any plans on some bit more central validation, maybe even with some AI/LLM/... with regular conversion of insights to fixed/deterministic rules as discussed throughout the thread? Something something semgrep/opengrep, yara, flathub manifest style etc pp?
    Update: Looping in @archlinux here.
    Also, any plans on enforcing this -> wiki.archlinux.org/title/Devel for all the AUR build business?

    Also: How does this incident not yet have a creative name? I'm not asking for a #bumsrakete but there's gotta be something 🤣

    Edit: jguer.space/blog/2026-06-15-ya delivered. It's the #AURpocalypse 😱 🤣

    #llm #flathub #abuseprevention #malwareCheck #yara #opengrep #archLinux #archlinuxaur #aur #AURpocalypse

    #llm #flathub #abuseprevention #malwarecheck #yara #opengrep
  3. avallach @[email protected] ·

    RE: infosec.exchange/@binaryninja/

    For the few people using #BinYars, it has been updated to support #BinaryNinja 5.3 and now targets YARA-X 1.15.0

    Update via Binja's plugin manager to get the latest.

    github.com/xorhex/BinYars-Side

    #YARA #YARAX

    #binyars #binaryninja #yara #yarax
  4. Habr @[email protected] ·

    Охота на Emmenhtal: как мы восстановили полную kill chain банковского трояна с переформатированного диска

    Разбираем реальный IR-кейс: ClickFix → Emmenhtal Loader → банковский троян с Telegram C2. Форензик переформатированного диска на 930 ГБ, VDM-дисамбигуация ложноположительных и восстановление артефактов из hibernation-файла.

    habr.com/ru/articles/1021698/

    #DFIR #форензика #malware_analysis #банковский_троян #Emmenhtal #ClickFix #threat_hunting #YARA #fileless_malware #incident_response

    #incident_response #fileless_malware #yara #threat_hunting #clickfix #emmenhtal
  5. avallach @[email protected] ·

    Yara-X 1.13 released!

    Run (to get the latest): cargo install-update -i yara-x-cli

    github.com/VirusTotal/yara-x/r

    #YARAX #YARA

    #yarax #yara
  6. avallach @[email protected] ·

    Yara-X has a language server for VS-Code

    marketplace.visualstudio.com/i

    #YARAX #YARA

    #yarax #yara
  7. avallach @[email protected] ·

    github.com/VirusTotal/yara-x/r

    Time to update: cargo install-update -i yara-x-cli

    #YARA #YARAX

    #yara #yarax
  8. avallach @[email protected] ·

    This feature of yara-x will simplify some of my rules. This is awesome!

    The new yarax ‘with’ statement:

    github.com/VirusTotal/yara-x/p

    #yara #yarax

    #yara #yarax
  9. avallach @[email protected] ·

    Know your tools 😉

    github.com/lief-project/LIEF/i

    Describe the bug
    Parsing the sample with LIEF, YARA-X and pefile gives a different result for LIEF.
    YARA-X and pefile agrees that those samples have exports, but LIEF says there is none.

    Fwiw, #VT does not report them either - example: virustotal.com/gui/file/ffc89c

    #pefile #yara #yarax #lief

    #vt #pefile #yara #yarax #lief
  10. Tedi Heriyanto @[email protected] ·

    YARA is dead, long live YARA-X: blog.virustotal.com/2024/05/ya

    #YARA #YARAX

    #yara #yarax
  11. avallach @[email protected] ·

    Nice movement on porting the Macho #YARA module over to #YARAX (the next implementation of Yara). Checkout Jacob’s blog here! latonis.github.io/yara-and-me

    #yara #yarax