Evaluate integration of Yara-forge

intelowlproject / IntelOwl

IntelOwl: manage your Threat Intelligence at scale

https://intelowlproject.github.io

GNU Affero General Public License v3.0

3.79k stars 428 forks source link

Evaluate integration of Yara-forge #2035

Open mlodic opened 9 months ago

mlodic commented 9 months ago

https://cyb3rops.medium.com/introducing-yara-forge-a77cbb77dcab. We could re-evaluate how we manage the rules.

They update the list once in a week. This would remove the efforts of maintaining a list of decent yara rules repositories. We could just download these rules and remove the other repos by default

alpeshjamgade commented 8 months ago

hi @mlodic , can i work on this as my first contribution.

mlodic commented 8 months ago

yep you are welcome. What we need is a new analyzer that download periodically these rules and execute them.