Yara rules support in ADS
Information
| Summary: |
Information about the support of Yara rules in ADS |
| Environment: |
Product: Flowmon ADS Version: All Platform: HW, Virtual |
| Question/Problem Description: |
Do we support Yara rules in ADS? |
| Steps to Reproduce: | |
| Error Message: | |
| Defect Number: | |
| Enhancement Number: | |
| Cause: | |
| Resolution: |
No, we do not support Yara rules. Yara rules work with malware samples. This kind of information is not present in flow data so ADS doesn't support them. Suricata IDS doesn't support them as well. |
| Workaround: | |
| Notes: |
Was this article helpful?
0 out of 0 found this helpful