carbonblack / cb-yara-connector

Analyze binaries collected in VMware Carbon Black EDR against Yara rules.
36 stars 8 forks source link

Add meta fields from yara hits #4

Closed jgarman closed 3 years ago

jgarman commented 8 years ago

Parse out some of the meta variables contained in the Yara rules and present it along with a hit event. For example, it would be great to have at least the author and reference as searchable fields