CreateYARARuleIndicators

Details

ID	`CreateYARARuleIndicators`
Language	python
From Version	6.10.0
Docker Image	`demisto/yarapy:1.0.0.9067966`
Tags	Utility

README

Script Data

Name	Description
Script Type	python3
Tags	Utility

Inputs

Argument Name	Description
string	One or more YARA signatures in string format.
entryID	An entry ID for a file containing YARA signatures.

Outputs

Path	Description	Type
CreateYARARuleIndicators.value	The YARA Rule name	string
CreateYARARuleIndicators.description	The YARA Rule description.	string
CreateYARARuleIndicators.rawrule	The raw YARA Rule in code block format.	string
CreateYARARuleIndicators.rulecondition	The YARA Rule condition.	string
CreateYARARuleIndicators.strings	The YARA Rule strings in grid format.	string
CreateYARARuleIndicators.tags	The YARA Rule tags.	string

Source

CreateYARARuleIndicators.py CreateYARARuleIndicators_test.py CreateYARARuleIndicators.yml

Download History Raw

args:
- name: yara_signatures
  required: false
  description: One or more YARA signatures, separated by a comma, in string format.
- name: entry_id
  required: false
  description: An entry ID for a file containing YARA signatures.
- name: create_relationships
  required: false
  defaultValue: 'false'
  description: Create relationships with CVEs, Attack Patterns and APTs.
commonfields:
  id: 'CreateYARARuleIndicators'
  version: -1
outputs:
- contextPath: CreateYARARuleIndicators.value
  description: The YARA Rule name.
  type: string
- contextPath: CreateYARARuleIndicators.description
  description: The YARA Rule description.
  type: string
- contextPath: CreateYARARuleIndicators.rawrule
  description: The raw YARA Rule in code block format.
  type: string
- contextPath: CreateYARARuleIndicators.rulecondition
  description: The YARA Rule condition.
  type: string
- contextPath: CreateYARARuleIndicators.strings
  description: The YARA Rule strings in grid format.
  type: string
- contextPath: CreateYARARuleIndicators.tags
  description: The YARA Rule tags.
  type: string
dockerimage: demisto/yarapy:1.0.0.9067966
enabled: true
engineinfo: {}
name: CreateYARARuleIndicators
runas: DBotWeakRole
runonce: false
script: ''
scripttarget: 0
subtype: python3
tags:
- Utility
type: python
fromversion: 6.10.0
tests:
- No tests (auto formatted)