carbonblack / cb-yara-connector

Analyze binaries collected in VMware Carbon Black EDR against Yara rules.
36 stars 8 forks source link

Support rescanning of binaries when yara rules change #1

Closed jgarman closed 3 years ago

jgarman commented 8 years ago

There is support in the data model for "versions" of the analysis. This should be taken advantage of in order to rescan binaries when Yara rules have been added or changed