https://github.com/osquery/osquery logo
s

ShawnT

12/14/2018, 5:16 PM
When doing an on-demand yara scan, does the signature file have to be stored locally or could it be stored in a fileshare?
p

packetzero

12/14/2018, 6:37 PM
yara table implementation looks for file path.
if you can make that file look local to osquery, but is actually on a file share, then you might be able to make that work.
2 Views