Neo23x0/Loki

Add YARA repositories manually

zaqes opened this issue · 2 comments

zaqes commented

Would be nice if this could be included.
I guess I could just update the UPDATE_URL_SIGS with the URLs (?), but a command would be nice.

Neo23x0 commented

That's YARA rule management; not necessarily a task of the scanner.
Furthermore, other YARA rule repos are often shit. They contain expensive rules or rules that trigger tons of FPs. So be careful using them.

zaqes commented

That's true!

So update the list in UPDATE_URL_SIGS would be the best way forward at the moment?