• Support
  • Forums
  • Blogs

OTX Yara Rules

thomas.johnsonthomas.johnson

New Life Form
When I try to use the import "hash" in the YARA RULE CONTENT and conduct a test scan of the rule I get a failure 'rule' invalid. Is this by design, meaning that I can not use conditions that support comparison on hash values? See below.

BAD OTX YARA
Bad-OTX-Yara

Good OTX Yara

Good-OTX-Yara
Tagged:

Share post:

Sign In or Register to comment.