When doing an on demand yara scan does the signature file ha

Question

When doing an on demand yara scan does the signature file have to be stored locally or could it be stored in a fileshare

packetzero · Answer

yara table implementation looks for file path

packetzero · Answer

if you can make that file look local to osquery but is actually on a file share then you might be able to make that work