Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[ImportFileYARA]: Create an import file connector dedicated to import YARA files/rules #3235

Open
romain-filigran opened this issue Jan 8, 2025 · 0 comments
Open

[ImportFileYARA]: Create an import file connector dedicated to import YARA files/rules #3235

romain-filigran opened this issue Jan 8, 2025 · 0 comments
Assignees
@romain-filigran
Labels
feature use for describing a new feature to develop
Milestone
Release 6.5.0

Comments

@romain-filigran
Copy link
Member

Provide an ImportFileYARA connector that will ingests YARA rules into OpenCTI, converting them into Indicators.
The connector should operate in two modes (connector configuration option: SPLIT_RULES):

  • single Indicator Mode (SPLIT_RULES: False): Combines all YARA rules into one Indicator
  • split Indicator Mode (SPLIT_RULES: True): Creates Indicators for each YARA rule in the file
@romain-filigran romain-filigran added feature use for describing a new feature to develop needs triage use to identify issue needing triage from Filigran Product team labels Jan 8, 2025
@romain-filigran romain-filigran added this to the Release 6.6.0 milestone Jan 8, 2025
@romain-filigran romain-filigran removed the needs triage use to identify issue needing triage from Filigran Product team label Jan 8, 2025
@romain-filigran romain-filigran self-assigned this Jan 12, 2025
@romain-filigran romain-filigran mentioned this issue Jan 13, 2025
Open
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@romain-filigran romain-filigran

Labels
feature use for describing a new feature to develop
Projects
None yet
Milestone
Release 6.5.0
Development

No branches or pull requests
1 participant
@romain-filigran