16c8d52e52
Razorback is a framework for an intelligence driven security solution. It consists of a Dispatcher at the core of the system, surrounded by Nuggets of varying types. The Yara nugget allows modified Yara rules to dictate which flags are set when they alert. WWW: http://razorbacktm.sourceforge.net/ PR: ports/167756 Submitted by: Tom Judge <tom@tomjudge.com>
6 lines
328 B
Text
6 lines
328 B
Text
After this port has been installed, you will need to copy and edit the
|
|
sample configuration (rzb_yara.conf.sample) to rzb_yara.conf.
|
|
|
|
Additionally, you will need to provide rules for yara. The rules should be
|
|
placed in the directory specified in the rzb_yara.conf file. The rules may
|
|
be placed in subdirectories or symlinked.
|