November 2019
Intermediate to advanced
346 pages
9h 36m
English
In the following steps, we show you how to create YARA rules and test them against a file:
rule is_a_pdf { strings: $pdf_magic = {25 50 44 46} condition: $pdf_magic at 0 } rule dummy_rule1 { condition: false } rule dummy_rule2 { condition: true }
Yara rule.yara PythonBrochure
The result should be as follows:
is_a_pdf target_filedummy_rule2 target_rule