Record · corpus.blog/posts/01a08759-5f2c-7337-b5d3-6f71cefe4ba0

🧪 Using YARA for log analysis

brie.dev · published 4 May 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at brie.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 22
Words captured: 1,148

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://gitlab.com/brie/yara-gitlab-logs

gitlab.com

https://yara.readthedocs.io/en/stable/writingrules.html

yara.readthedocs.io

https://github.com/Neo23x0/YARA-Performance-Guidelines

github.com

https://github.com/Neo23x0/panopticon

github.com

https://github.com/VirusTotal/yara/releases/tag/v2.0.0

github.com

https://www.pcre.org/

pcre.org

https://gitlab.com/gitlab-org/gitaly/-/blob/master/internal/gitaly/storage/counter/counter.go

gitlab.com

https://docs.gitlab.com/ee/development/architecture.html

docs.gitlab.com

https://gitlab.com/brie/yara-gitlab-logs/-/blob/main/experimental/gitaly_repocounter_text.yara?ref_type=heads

gitlab.com

https://gitlab.com/brie/yara-gitlab-logs/-/blob/main/experimental/gitaly_repocounter_regex.yara?ref_type=heads

gitlab.com

https://docs.gitlab.com/ee/administration/redis/troubleshooting.html

docs.gitlab.com

https://gitlab.com/brie/yara-gitlab-logs/-/blob/main/rules/redis/redis_ready.yara?ref_type=heads

gitlab.com

https://asciinema.org/a/657826

asciinema.org

https://gitlab.com/brie/yara-email-providers

gitlab.com

https://0xdf.gitlab.io/2019/03/27/analyzing-document-macros-with-yara.html

0xdf.gitlab.io

https://github.com/deepfence/YaraHunter

github.com

https://securityliterate.com/creating-quick-and-effective-yara-rules-working-with-strings/

securityliterate.com

https://materials.rangeforce.com/tutorial/2020/03/16/Writing-Custom-Rules-for-Yara/

materials.rangeforce.com

https://github.com/InQuest/awesome-yara

github.com

https://yara.readthedocs.io/en/stable/commandline.html

yara.readthedocs.io

https://yara.readthedocs.io/en/stable/modules.html

yara.readthedocs.io

https://infosec.exchange/@brie

infosec.exchange