When doing an on demand yara scan does the signature file ha osquery #general

When doing an on-demand yara scan, does the signat...

ShawnT

12/14/2018, 5:16 PM

When doing an on-demand yara scan, does the signature file have to be stored locally or could it be stored in a fileshare?

packetzero

12/14/2018, 6:37 PM

yara table implementation looks for file path.

packetzero

12/14/2018, 6:38 PM

if you can make that file look local to osquery, but is actually on a file share, then you might be able to make that work.

2 Views