Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add log mode to Yara.Glob to output String.Data #3838

Open
mgreen27-r7 opened this issue Oct 17, 2024 · 0 comments
Open

Add log mode to Yara.Glob to output String.Data #3838

mgreen27-r7 opened this issue Oct 17, 2024 · 0 comments

Comments

@mgreen27-r7
Copy link
Contributor

mgreen27-r7 commented Oct 17, 2024

We reguarly use Yara.Glob to hunt for IOC lines in log files. Currently the Yara artifacts use the upload feature to upload hit for presentation for standard yara use cases.

It i often useful when running yara over logs to post process the data and push out a yara rule that collects the whole log line so we can see important context (like IP or User-Agent). For this use case a simple String.Data output would be best instead of uploading the hit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant